home | list info | list archive | date index | thread index

Re: [OCLUG-Tech] October Meeting: GPG Overview and Keysigning

  • Subject: Re: [OCLUG-Tech] October Meeting: GPG Overview and Keysigning
  • From: Richard Guy Briggs <rgb [ at ] tricolour [ dot ] net>
  • Date: Thu, 4 Oct 2012 17:01:04 -0400
On Thu, Oct 04, 2012 at 04:42:38PM -0400, Michael Goguen wrote:
> it just seems like i better start doing and learning how and making
> mistakes, rather than 'waiting for perfect conditions' since that may never
> arise, etc.  Or i might not gain the knowledge to know, etc.

Aye, that's the spirit!  ;-)

Help isn't far, don't be shy.

> Michael Goguen
> 
> On Thu, Oct 4, 2012 at 4:41 PM, Michael Goguen <michael [ dot ] goguen [ at ] gmail [ dot ] com>wrote:
> > do i need to delete the old pgp thing? someone mentioned the concerns with
> > using an online keypair generator... I guess I should have listened.
> >
> > Michael Goguen
> >
> > On Thu, Oct 4, 2012 at 4:40 PM, Michael Goguen <michael [ dot ] goguen [ at ] gmail [ dot ] com>wrote:
> >> Thx for the help guys. usb linux boot live cd and netbook are available
> >> to bring.
> >>
> >> Michael Goguen
> >>
> >> On Thu, Oct 4, 2012 at 3:42 PM, Richard Guy Briggs <rgb [ at ] tricolour [ dot ] net>wrote:
> >>> On Thu, Oct 04, 2012 at 01:35:59PM -0400, Michael Goguen wrote:
> >>> > I really want to do this gpg signing and start using gpg, but i'm not
> >>> sure
> >>> > i've figured it out right, yet.
> >>> >
> >>> > I've got id, will bring tonight, went to an online site to make a
> >>> keypair
> >>> > but it was really long... so um not sure if it was right, since it was
> >>> > different than the example i saw.
> >>>
> >>> Bring your laptop if you have one and generate a keypair on that
> >>> tonight.  I can help.  I would not trust a keypair generated by any
> >>> machine you do not control.
> >>>
> >>> > at any rate, will bring a usb key, hopefully I can do something there?
> >>>
> >>> Yup, please do that.  If you haven't got a laptop, if you can bring a
> >>> usb key with a live linux distro on it that is bootable, that should be
> >>> trustable.
> >>>
> >>> > michael goguen
> >>> >
> >>> > sixonethree___8fiveone.79zero5 cel
> >>> > On Tue, Oct 2, 2012 at 10:38 PM, Michael Goguen <
> >>> michael [ dot ] goguen [ at ] gmail [ dot ] com>wrote:
> >>> > > a file with the gpg encrypted on a usb key, always used when using a
> >>> > > computer with a usb boot?
> >>> > >
> >>> > > I donno.
> >>> > >
> >>> > > Michael Goguen
> >>> > >
> >>> > > On Tue, Oct 2, 2012 at 10:37 PM, Michael Goguen <
> >>> michael [ dot ] goguen [ at ] gmail [ dot ] com>wrote:
> >>> > >> I'm concerned that my home computer is compromised (and I'm not
> >>> sure I
> >>> > >> can keep it physically secure, let alone the info and data), but I
> >>> would
> >>> > >> very much like to get into the practice of using gpg, etc, and do
> >>> this key
> >>> > >> signing.
> >>> > >>
> >>> > >> Any suggestions?
> >>> > >>
> >>> > >> Michael Goguen
> >>> > >>
> >>> > >> On Tue, Oct 2, 2012 at 10:23 PM, Rob Echlin <rob [ at ] echlin [ dot ] ca> wrote:
> >>> > >>> I'm looking forward to this meeting!
> >>> > >>>
> >>> > >>> Rob Echlin, B. Eng.
> >>> > >>>
> >>> > >>> >________________________________
> >>> > >>> > From: Murphy Scott <scott [ dot ] murphy [ at ] arrow-eye [ dot ] com>
> >>> > >>> >To: linux [ at ] oclug [ dot ] on [ dot ] ca
> >>> > >>> >Sent: Wednesday, September 26, 2012 11:40:12 PM
> >>> > >>> >Subject: [OCLUG-Tech] October Meeting: GPG Overview and Keysigning
> >>> > >>> >
> >>> > >>> >Just a reminder that next week the meeting topic will be a GPG
> >>> overview
> >>> > >>> and a GPG keysigning. If you want to participate in the
> >>> keysigning, it's
> >>> > >>> more interactive than a talk and you will need a few prepared
> >>> items:
> >>> > >>> >
> >>> > >>> >* A previously generated key you plan on using
> >>> > >>> >* One, preferably two pieces of picture ID to prove you are who
> >>> you say
> >>> > >>> you are
> >>> > >>> >* Your key information (fingerprint and uid)
> >>> > >>> >
> >>> > >>> >Ideally, you should bring small pieces of paper with your name
> >>> and pgp
> >>> > >>> key fingerprint on them to hand out to people. You can include a
> >>> small
> >>> > >>> "verified" checkbox that someone can mark if they choose to check
> >>> > >>> identification.
> >>> > >>> >
> >>> > >>> >Method:
> >>> > >>> >* Generate your fingerprint and paste it into a file
> >>> > >>> >* Copy and paste until you have filled a sheet of paper
> >>> > >>> >* Cut into strips to hand out.
> >>> > >>> >
> >>> > >>> >For example, I'd have the following:
> >>> > >>> >
> >>> > >>> >gpg --fingerprint scott [ dot ] murphy [ at ] arrow-eye [ dot ] com
> >>> > >>> >pub   1024D/C52FF996 2001-03-19
> >>> > >>> >      Key fingerprint = DBC8 F89C 5F66 8A96 2414  F97D 3F0D 382D
> >>> C52F
> >>> > >>> F996
> >>> > >>> >      (extra info removed)
> >>> > >>> >
> >>> > >>> >So I'd fill the paper with:
> >>> > >>> >
> >>> > >>> >scott [ dot ] murphy [ at ] arrow-eye [ dot ] com C52FF996 Key fingerprint = DBC8 F89C
> >>> 5F66
> >>> > >>> 8A96 2414  F97D 3F0D 382D C52F F996  - [ ] Checked
> >>> > >>> >
> >>> > >>> >and cut it into strips to pass out at the keysigning
> >>> > >>> >
> >>> > >>> >--
> >>> > >>> >Scott Murphy
> >>> > >>> >scott [ dot ] murphy [ at ] arrow-eye [ dot ] com
> >>> > >>> >
> >>> > >>> >
> >>> > >>> >
> >>> > >>> >
> >>> > >>> >_______________________________________________
> >>> > >>> >Linux mailing list
> >>> > >>> >Linux [ at ] lists [ dot ] oclug [ dot ] on [ dot ] ca
> >>> > >>> >http://oclug.on.ca/mailman/listinfo/linux
> >>> > >>> >
> >>> > >>> >
> >>> > >>> >
> >>> > >>> _______________________________________________
> >>> > >>> Linux mailing list
> >>> > >>> Linux [ at ] lists [ dot ] oclug [ dot ] on [ dot ] ca
> >>> > >>> http://oclug.on.ca/mailman/listinfo/linux
> >>> > >>>
> >>> > >>
> >>> > >>
> >>> > >
> >>> > _______________________________________________
> >>> > Linux mailing list
> >>> > Linux [ at ] lists [ dot ] oclug [ dot ] on [ dot ] ca
> >>> > http://oclug.on.ca/mailman/listinfo/linux
> >>>
> >>>         slainte mhath, RGB
> >>>
> >>> --
> >>> Richard Guy Briggs               --  ~\    -- ~\            <
> >>> hpv.tricolour.net>
> >>> <www.TriColour.net>                --  \___   o \@       @       Ride
> >>> yer bike!
> >>> Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
> >>> Vote! -- <greenparty.ca
> >>> >_____GTVS6#790__(*)__(*)________(*)(*)_________________
> >>>
> >>
> >>
> >

	slainte mhath, RGB

--
Richard Guy Briggs               --  ~\    -- ~\            <hpv.tricolour.net>
<www.TriColour.net>                --  \___   o \@       @       Ride yer bike!
Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________