Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 19:13, freej...@is-not-my.name wrote: >> I should note that many people actually *don't* check if the e-mail >> address belongs to the person whose UID they sign. > > That doesn't sound right. We could have a simple misunderstanding here: I do think many people check if the person wh

Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 19:13, freej...@is-not-my.name wrote: > Not necessarily but even if they did, how do they have access to the key? The attacker is doing you a real service getting /your/ key signed then :) Wasn't the purpose of the attacker to get his /own/ key falsely signed? The key he does have acc

Re: comments on uid

2012-03-18 Thread Eric H. Christensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Mar 18, 2012 at 06:13:32PM -, freej...@is-not-my.name wrote: > > I should note that many people actually *don't* check if the e-mail > > address belongs to the person whose UID they sign. If this were as > > "simple" to prove as it is to pr

Re: comments on uid

2012-03-18 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 18-03-2012 15:13, freej...@is-not-my.name escribió: >> I should note that many people actually *don't* check if the >> e-mail address belongs to the person whose UID they sign. If this >> were as ... > That doesn't sound right. If you can't verify

Re: comments on uid

2012-03-18 Thread Daniel Kahn Gillmor
On 03/18/2012 04:13 AM, freej...@is-not-my.name wrote: My question is on a situation I didn't add the comment by mistake when I created the key and now I'd like to be able to add a comment. The key isn't signed etc. Thanks. I suggest that you probably actually don't want the comment at all. Th

Re: comments on uid

2012-03-18 Thread freejack
> I should note that many people actually *don't* check if the e-mail > address belongs to the person whose UID they sign. If this were as > "simple" to prove as it is to prove you have a certain name by showing a > passport or something, it might be checked more often. That doesn't sound right. I

Re: comments on uid

2012-03-18 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 18-03-2012 5:13, freej...@is-not-my.name escribió: ... > Alright that's a good answer but aren't people just confirming the > email address belongs to a known signer when they sign a key? Does > it really matter what the UID comment is? I think it

Re: comments on uid

2012-03-18 Thread Peter Lebbing
On 18/03/12 09:13, freej...@is-not-my.name wrote: > Alright that's a good answer but aren't people just confirming the email > address belongs to a known signer when they sign a key? Does it really > matter what the UID comment is? I think it may be going a bit too far to say > the UID is guarantee

Re: comments on uid

2012-03-18 Thread freejack
> Well, the UID is what other people sign. Suppose by a wonderful > coincidence my name is Barack Obama. To prevent confusion, I create this > UID "Barack Obama (NOT the US president) > People sign this. They have seen my birth certificate... erm... I mean > passport :) Hahaha!!! Damn Hawaiins

Re: comments on uid

2012-03-17 Thread brian m. carlson
On Sat, Mar 17, 2012 at 12:11:39AM -, freej...@is-not-my.name wrote: > > The comment can only be added when creating the UID. If you wish to > > add, remove or edit you can create a new UID and set it as primary. If > > the key has not been shared, you can delete the old UIDs, but if it is > >

Re: comments on uid

2012-03-17 Thread Peter Lebbing
> Thanks for the info. Is there some reason why we can't edit the UID? I > realize it doesn't help if the key is on a server but this key is not. Well, the UID is what other people sign. Suppose by a wonderful coincidence my name is Barack Obama. To prevent confusion, I create this UID "Barack Oba

Re: comments on uid

2012-03-16 Thread freejack
> The OP was maybe referring to the comment in UIDs of the form > > Name (Comment) . Right that's what I meant. > The comment can only be added when creating the UID. If you wish to > add, remove or edit you can create a new UID and set it as primary. If > the key has not been shared, you can d

Re: comments on uid

2012-03-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 15 March 2012 at 7:26:36 PM, in , Hauke Laging wrote: > But you need --list-options show-notations / > show-policy-urls to see them. And, being more precise, > that is not a comment on a UID but on one of the > signatures of the UI

Re: comments on uid

2012-03-15 Thread Hauke Laging
Am Donnerstag, 15. März 2012, 18:54:28 schrieb freej...@is-not-my.name: > Is it possible to add or edit comments on a uid? I didn't see any obvious > option in the help for edit. --cert-notation / --cert-policy-url may be what you're looking for. But you need --list-options show-notations / show-

comments on uid

2012-03-15 Thread freejack
Is it possible to add or edit comments on a uid? I didn't see any obvious option in the help for edit. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users