Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-28 Thread David Shaw
On Sep 24, 2010, at 1:17 PM, Daniel Kahn Gillmor wrote: > second, what does "this option implies --ask-sig-expire ..." mean? it > seems to mean "this implies that the following options are not > available" or something like that. You are correct. The manual is incorrect. Setting force-v3-sigs

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-27 Thread David Shaw
On Sep 24, 2010, at 2:52 PM, Phil Brooke wrote: > On Fri, 24 Sep 2010, David Shaw wrote: >> There is actually a defined field for this in OpenPGP (see section 5.2.3.22, >> Signer's User ID). I don't think anyone implements it though. > > Is there any particular difficulty or reason for it not b

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread Phil Brooke
On Fri, 24 Sep 2010, David Shaw wrote: There is actually a defined field for this in OpenPGP (see section 5.2.3.22, Signer's User ID). I don't think anyone implements it though. Is there any particular difficulty or reason for it not being implemented by anyone? (It looks very similar to, fo

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread Daniel Kahn Gillmor
On 09/24/2010 12:57 PM, David Shaw wrote: > Hmm. It's a v3 sig which can't carry a notation. Do you have force-v3-sigs > set anywhere? Or any of the --pgpX options (which set force-v3-sigs) ? yup, that was it. i don't recall putting that in my gpg.conf explicitly -- it must have been there fr

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread David Shaw
On Sep 24, 2010, at 12:47 PM, Daniel Kahn Gillmor wrote: > On 09/24/2010 11:53 AM, David Shaw wrote: >> There is actually a defined field for this in OpenPGP (see section 5.2.3.22, >> Signer's User ID). I don't think anyone implements it though. > > Ah, so there is! Thanks, David. > >>> Howev

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread Daniel Kahn Gillmor
On 09/24/2010 11:53 AM, David Shaw wrote: > There is actually a defined field for this in OpenPGP (see section 5.2.3.22, > Signer's User ID). I don't think anyone implements it though. Ah, so there is! Thanks, David. >> However, testing right now, it doesn't seem to work with gpg for regular >

Re: per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread David Shaw
On Sep 24, 2010, at 11:23 AM, Daniel Kahn Gillmor wrote: > On 09/24/2010 10:30 AM, Simon Richter wrote: >> Of course. I was talking about data signatures, i.e. "I'm signing this >> with my work hat on". > > ah, gotcha. sorry for the misunderstanding. > >> The main use case I have is my Debian w

per-user data signatures [was: Re: multiple keys vs multiple identities]

2010-09-24 Thread Daniel Kahn Gillmor
On 09/24/2010 10:30 AM, Simon Richter wrote: > Of course. I was talking about data signatures, i.e. "I'm signing this > with my work hat on". ah, gotcha. sorry for the misunderstanding. > The main use case I have is my Debian work -- when I sign a .changes > file, the Debian archive will accept