It looks like you're having connection troubles. Reconnect now.
10/05/2014 23:33:56
Public Pad Latest text of pad W71WEUOWRP Saved Oct 5, 2014 |
Keysigning Party am 08.02.2014
==============================
= Key-Liste =
- 0xAD26D9FB - vv01f, FP: 7247 DD6D CB19 A11D 4BCE 9536 24CB A706 AD26 D9FB
- 0x57F77F09 - SvenG, FP: 1128 37E2 CB46 7267 9E8E 2218 DAF9 C096
- 0x141E062E - josch: FP: 647A C949 0D71 E4A4 AAB0 B758 9EBA C63C 141E 062E (nicht verwechseln mit gleicher ID vom 2012-08-01)
- 0x426156CF - nek0 FP: 4496 1443 7F99 9F75 E984 89F0 1F59 D9F4 4261 56CF
- 0x8D58496D - raz FP: B590 E98A F1B7 7A4E 2823 8EBF 1B8F 5612 8D58 496D
- 0x3A822C7A - mirko FA: 9255 305B 0903 6820 871D BCCE 3E98 4DA9 3A82 2C7A
- 0x38DDDA39 - darkwake FP: F82B 0339 12A4 0E7A EBD8 5419 5FD4 547D 38DD DA39
- 0x2DACA746 - hsank FP: EB7E ABC0 C68F 39C3 FD97 7D60 7691 7DC4 2DAC A746
- 0x5AD416D3 - COeins FP: A0D8 4C44 5ABD AD84 2C33 3EC7 D4DA 39BC 5AD4 16D3
- DB4C5190 - blastmaster, FP: 270D AEB0 EC5A 129C E1F3 8E2F CB50 09A2 DB4C 5190
= STOP =
"mate time!" \o/
thanks for the party!
= GPG Optionen =
--search-key: suche schluessel auf dem keyserver
--recv-key: hole schluessel vom keyserver
--list-keys: zeige einen schluessel an
--list-sigs: zeige die Unterschriften eines Schlüssels an
--sign-key: signiere einen schluessel (nicht alle IDs)
--send-key: lade signierten schluessel auf den keyserver hoch
= Howto =
keyserver: njh.eu (Volker Grabsch)
alle schluessel vom keyserver runterziehen:
- gpg --recv-keys AD26D9FB 65F349F2 57F77F09 141E062E 426156CF 8D58496D 3A822C7A 38DDDA39 2DACA746 5AD416D3 DB4C5190
- gpg --list-key $keyid
- gpg --list-sigs $keyid
- gpg --edit-key 57F77F09
- gpg>
pub 1024R/57F77F09 created: 1995-01-30 expires: never usage: SCEA
trust: unknown validity: unknown
[ unknown] (1). Sven Guckes <pgp@guckes.net>
[ unknown] (2) Sven Guckes
[ revoked] (3) Sven Guckes <guckes@inf.fu-berlin.de>
[ revoked] (4) Sven Guckes <guckes@math.fu-berlin.de>
einer uid vertrauen und die unterschreiben
- gpg> uid 1
- gpg> trust 3
- gpg> sign
eine (z.B. zurückgezogene) uid auswählen und löschen
- gpg> uid 3
- gpg> deluid
unbrauchbare Schlüssel und Unterschriften löschen
- clean
mehr erfahrt ihr in der Doku
oder über
- gpg> help
speichern nicht vergessen
- gpg> save
- upload keys to special keyserver:
- gpg --keyserver njh.eu --send-keys $keyid
- Keyserver Statistik: http://njh.eu:11371/pks/lookup?op=stats
= Signing =
key signing per FOR schleife:
for key in AD26D9FB 65F349F2 57F77F09 141E062E 426156CF 8D58496D 3A822C7A 38DDDA39 2DACA746 5AD416D3 DB4C5190; do
for> gpg --edit-key $key
for> done
= full check =
Q: How do I detect a forged key?
A: As explained in question "Can a public key be forged?", each component of the public key can be faked. It is, however, not possible to create a fake key for which all the components match.
For this reason, you should always verify that key ID, fingerprint, and key size correspond when you are about to use someone's key. And when you sign a user ID, make sure it is signed by the key's owner!
Similarly, if you want to provide information about your key, include not only key ID, but full fingerprint, algo and key size.
= Brain?art =
Was man mit der PhotoID noch machen könnte:
https://github.com/vv01f/KAvatar (dezentraler Ersatz für Gravatar)
Ein Kontaktformular mit PGP (JavaScript):
Sven stellt vor:
PGP pathfinder & key statistics http://pgp.cs.uu.nl/
"msd ranking - wer rankt wie?"
im debian-paket "signing-party" gibt es sig2dot,
welcher die pgp-signaturen in .dot diagramme umwandelt.
Tutorials:
"What does those boxes and arrows mean?"
"Certification check level 0/1/2/3 on the primary user ID. The primary user ID is the only one saved in the .wot file and used here. On graphs, the levels are represented by black/red/blue/green arrows. The black arrow is thin, the rest are thick."
forged / vanity PGP Keys:
2012-09-13 Aaron Toponce: Generating vanity OpenPGP keys - high level
https://groups.google.com/forum/#!msg/oalug/fZKzEQq1iyA/f5baKR_IoEsJ
immerhin.. ein ansatz! aber kein code.
EOF
