encrypting to a user, "There is no assurance this key belongs to the named user"

Michael Tokarev mjt at tls.msk.ru
Sat Jun 22 10:52:12 CEST 2013


22.06.2013 11:56, Peter Lebbing wrote:
> On 21/06/13 12:34, Michael Tokarev wrote:
>> It says "validity: unknown"
> 
> I just thought of something. If for some reason your /own/ key is no longer
> trusted, you can make signatures all day but it won't increase validity.
> 
> If you do --edit-key A8983CE7, what does its trust say?

That was it.

$ gpg ... --edit-key A8983CE7
Secret key is available.

pub  1024R/A8983CE7  created: 2005-01-27  expires: never       usage: SC
                     trust: unknown       validity: unknown
sub  1024R/8BB2CB48  created: 2005-01-27  expires: never       usage: E
[ unknown] (1). f0501...


After setting trust to it:

pub  1024R/A8983CE7  created: 2005-01-27  expires: never       usage: SC
                     trust: ultimate      validity: ultimate
sub  1024R/8BB2CB48  created: 2005-01-27  expires: never       usage: E
[ultimate] (1). f0501...

and it now does not complain anymore when encrypting data to other
keys, without re-signing anything.

Wow.

WOW!

Thank you very much for this, awesome guess.

I think in quite some other cases when users had to trust _other_
keys to be able to encrypt data to them the actual problem was the
same as in my case.

And it's interesting that this prob only manifested itself now after
upgrade from 1.4.10 to 1.4.12.

I think I've seen similar issue myself before in other situation, it
was very much like that, so I too had to indicate ultimate trust for
other keys like that.  But it was several years ago.

Thanks you guys!

/mjt



More information about the Gnupg-users mailing list