Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
Am Freitag, 7. Juli 2006 06:31 schrieb Todd Zullinger: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of the others.) It's been discussed here before but I've not found

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Marcus Frings
* Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of the others.) Before I used a protocol to signing keys where I sent out random

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ingo Klöcker wrote: Try CA-Bot (http://cabot.alioth.debian.org/). Thanks Ingo. I haven't used it myself because I'm using a self-written script for creating challenges with KMail. Could you elaborate a little on the procedure you use to generate

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcus Frings wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of the

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Mark Kirchner
On Friday, July 7, 2006, 11:19:47 AM, Marcus wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of the others.) Before I

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
On Friday 07 July 2006 16:56, Todd Zullinger wrote: Ingo Klöcker wrote: I haven't used it myself because I'm using a self-written script for creating challenges with KMail. Could you elaborate a little on the procedure you use to generate the challenges? I'd love to have some examples of

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
On Friday 07 July 2006 17:09, Todd Zullinger wrote: Marcus Frings wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ingo Klöcker wrote: On Friday 07 July 2006 17:09, Todd Zullinger wrote: [...] But that does mean that you can't get a signed key to someone if the key you've signed doesn't have any encryption capabilities, correct? That's obviously correct. In

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 11:19:47AM +0200, Marcus Frings wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if I'm overlooking it on your page or any of the others.)

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 08:39:37PM +0200, Ingo Klöcker wrote: On Friday 07 July 2006 17:09, Todd Zullinger wrote: Marcus Frings wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 04:15:03PM -0400, Todd Zullinger wrote: Ingo Klöcker wrote: On Friday 07 July 2006 17:09, Todd Zullinger wrote: [...] But that does mean that you can't get a signed key to someone if the key you've signed doesn't have any encryption capabilities, correct?

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Marcus Frings
* Ingo Klöcker [EMAIL PROTECTED] wrote: On Friday 07 July 2006 17:09, Todd Zullinger wrote: Have you found in practice that you don't run into many sign-only keys that you are asked to certify? Among a few hundreds keys I've signed so far only a handful were sign-only or certification-only

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 07:22:40PM +0200, Mark Kirchner wrote: On Friday, July 7, 2006, 11:19:47 AM, Marcus wrote: * Todd Zullinger [EMAIL PROTECTED] wrote: What I don't see in any of the links is more information about sending an email challenge before signing a key. (My apologies if

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi David, David Shaw wrote: I've been away on vacation and only picked up this thread now. Hope it was relaxing. Welcome back seems like a negative thing to say. ;) This statement is not correct. Back in the PGP 2.x days, this might have been