Re: --lsign --add-me or the invisible WoT

2019-08-01 Thread Stefan Claas via Gnupg-users
Friedhelm Waitzmann wrote: > Stefan Claas: > > >I lsign Bob's key so third parties do not know (normally) that I did > >this. But how could my friend Alice trust Bob's key she has without > >my non-exportable lsign sig? > > >What I tried to propose is an additional parameter, like --add-me >

Re: --lsign --add-me or the invisible WoT

2019-08-01 Thread Friedhelm Waitzmann
Stefan Claas: >I lsign Bob's key so third parties do not know (normally) that I did >this. But how could my friend Alice trust Bob's key she has without >my non-exportable lsign sig? >What I tried to propose is an additional parameter, like --add-me >which would write a 'blob' to a second

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Stefan Claas via Gnupg-users
Andrew Gallagher wrote: > On 31/07/2019 14:58, Stefan Claas via Gnupg-users wrote: > > an exportable 'blob' for the lsign > > command, which can be then exchanged and would not be compatible with > > key servers, in case someone would try to upload such a blob > > The keyservers (SKS at least)

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Andrew Gallagher
On 31/07/2019 14:58, Stefan Claas via Gnupg-users wrote: > an exportable 'blob' for the lsign > command, which can be then exchanged and would not be compatible with > key servers, in case someone would try to upload such a blob The keyservers (SKS at least) blacklist lsign packets already, so

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Stefan Claas via Gnupg-users
Werner Koch wrote: > On Sat, 20 Jul 2019 11:57, gnupg-users@gnupg.org said: > > > additional paramemter like --add-me for --lsign would make sense, for > >--quick-sign-key fpr [names] >--quick-lsign-key fpr [names] > > Directly sign a key from the

Re: --lsign --add-me or the invisible WoT

2019-07-31 Thread Werner Koch via Gnupg-users
On Sat, 20 Jul 2019 11:57, gnupg-users@gnupg.org said: > additional paramemter like --add-me for --lsign would make sense, for --quick-sign-key fpr [names] --quick-lsign-key fpr [names] Directly sign a key from the passphrase without any further

Re: --lsign --add-me or the invisible WoT

2019-07-20 Thread Stefan Claas via Gnupg-users
Stefan Claas via Gnupg-users wrote: > Hi all, > > now since we have Hagrid and WKD I was wondering if in the future an > additional paramemter like --add-me for --lsign would make sense, for > people still in need of a WoT? > > The idea would be that people --lsign each others keys and GnuPG, >

--lsign --add-me or the invisible WoT

2019-07-20 Thread Stefan Claas via Gnupg-users
Hi all, now since we have Hagrid and WKD I was wondering if in the future an additional paramemter like --add-me for --lsign would make sense, for people still in need of a WoT? The idea would be that people --lsign each others keys and GnuPG, or other public key crypto software, would then save