Thanks everyone, that's put me in the picture - I'll follow the links up when I fell like a read later. The two points below were my eureka moments, I guess!
"The signing is such that if the document is altered in transit, the signature is no longer valid." "...the keys themselves can be signed by others who can verify you are who you say you are. These signatures can be seen in a public key..." Steve :) -- ubuntu-uk mailing list ubuntu-uk@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk