Question about how to secure the signing key

Faramir faramir.cl at gmail.com
Wed Feb 4 22:22:05 CET 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Well, I was reading some old messages of this list (from 2004), and saw
something about it would be possible to steal the public part of a
signing subkey... the solution was:

"The fix is fairly simple conceptually.  Just have the signing subkey
issue a signature on the primary key."

 And, since I made a signing subkey, I'd like to know if I need to do
something to issue that signature, or if it was done automatically by
gpg. The key was created using gpg 1.4.9, so maybe that problem was
solved a lot of time ago... or maybe it still require some user action...

 Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJJigb9AAoJEMV4f6PvczxAQq0IAIiq8vjSRGXsMQqOwkyzbDqS
LVq6ba5YNofclgF6xD6sYZR8WnQ1VIyQoNY4Gszpmm1dup+V/8LGk+Q9dGTANLFV
7Zhfptcb9/7mNByNZoEtQKm+LMaDshta857z/1qfYtXb4S3OF75BQU3JycBMLVhA
rkx9L+0ZlRxY2NkyPWJzZ91l0gOshqldYw9AKP6qxRtWvqPnDOB6YsmGDbTvuN0U
pq7okl2LyhIzoSGeSPB2ZXWO/NgPaRegl8fmSQYm+2AS4N3XUhLPZ2QazO0EfIHY
YMkFQzS7O0WzcuTCY9J/BFkwNddbkKzt7DCd+kwBVN2MtHFIEexnzsJS+2YMX/4=
=cP15
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list