Question about how to secure the signing key
Faramir
faramir.cl at gmail.com
Wed Feb 4 22:22:05 CET 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Well, I was reading some old messages of this list (from 2004), and saw
something about it would be possible to steal the public part of a
signing subkey... the solution was:
"The fix is fairly simple conceptually. Just have the signing subkey
issue a signature on the primary key."
And, since I made a signing subkey, I'd like to know if I need to do
something to issue that signature, or if it was done automatically by
gpg. The key was created using gpg 1.4.9, so maybe that problem was
solved a lot of time ago... or maybe it still require some user action...
Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEcBAEBCAAGBQJJigb9AAoJEMV4f6PvczxAQq0IAIiq8vjSRGXsMQqOwkyzbDqS
LVq6ba5YNofclgF6xD6sYZR8WnQ1VIyQoNY4Gszpmm1dup+V/8LGk+Q9dGTANLFV
7Zhfptcb9/7mNByNZoEtQKm+LMaDshta857z/1qfYtXb4S3OF75BQU3JycBMLVhA
rkx9L+0ZlRxY2NkyPWJzZ91l0gOshqldYw9AKP6qxRtWvqPnDOB6YsmGDbTvuN0U
pq7okl2LyhIzoSGeSPB2ZXWO/NgPaRegl8fmSQYm+2AS4N3XUhLPZ2QazO0EfIHY
YMkFQzS7O0WzcuTCY9J/BFkwNddbkKzt7DCd+kwBVN2MtHFIEexnzsJS+2YMX/4=
=cP15
-----END PGP SIGNATURE-----
More information about the Gnupg-users
mailing list