From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: zsh-users-return-23691-ml=inbox.vuxu.org@zsh.org X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2 Received: from primenet.com.au (ns1.primenet.com.au [203.24.36.2]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id d3879e65 for ; Tue, 2 Oct 2018 07:58:16 +0000 (UTC) Received: (qmail 8987 invoked by alias); 2 Oct 2018 07:57:57 -0000 Mailing-List: contact zsh-users-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Users List List-Post: List-Help: List-Unsubscribe: X-Seq: 23691 Received: (qmail 10374 invoked by uid 1010); 2 Oct 2018 07:57:57 -0000 X-Qmail-Scanner-Diagnostics: from out.migadu.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.99.2/21882. spamassassin: 3.4.1. Clear:RC:0(91.121.223.63):SA:0(-1.9/5.0):. Processed in 3.280777 secs); 02 Oct 2018 07:57:57 -0000 X-Envelope-From: ben@bfoliver.com X-Qmail-Scanner-Mime-Attachments: |signature.asc| X-Qmail-Scanner-Zip-Files: | Authentication-Results: out.migadu.com; auth=pass (plain) Date: Tue, 2 Oct 2018 08:51:17 +0100 From: Ben Oliver To: zsh-users@zsh.org Subject: Re: PGP key question Message-ID: <20181002075117.GA7637@neptune.home.b999.me> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Kj7319i9nmIyA2yE" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) DKIM-Signature: v=1;a=rsa-sha256;bh=MbuCckNgf7N8u3yWRBqoipaIESNN6WnguV9pttD3bfw=;c=relaxed/simple;d=bfoliver.com;h=from:subject:date:to;s=default;b=nAop24q6D3UUvp0wOsHKcFe0EGkAaIZC5l+f85TzK74QW9VeDGnE7ZNht77gMv/vSind9Smq50P+gSKOGhMVTORf+NlxxkWvQ6hdoAkZT7TmAxZ7+uwR5iiPBtpsGkuk9nXq8Rho+kdDcyxZXG7HKboBZreUYm5yw7nfZ0VSVfY= --Kj7319i9nmIyA2yE Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 18-10-02 01:21:03, Clark Dunson wrote: >gpg: WARNING: This key is not certified with a trusted signature! > >gpg: There is no indication that the signature belongs to the own= er. > >Primary key fingerprint: E966 46BE 08C0 AF0A A0F9 0788 A5FE EE3A C793 7444 > > Subkey fingerprint: 6EB6 0B63 7CE5 ACBF 2449 A2DA DB27 E997 429A F20C > >Is there a concern here? This is just a warning that you have not personally signed the key, ie=20 verified that you know this person. gpg just knows that key X was used to sign the package, it doesn't know=20 if the key truly belongs to the owner - that's on you to find out. If=20 you are 100% sure (usually after meeting the owner) you can sign the key=20 to avoid the warning. --Kj7319i9nmIyA2yE Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCgAdFiEEtpfpLjwkl3BUjdxoqA4pS4WoFqcFAluzI3IACgkQqA4pS4Wo FqeLGgf9F6RGW93s5+ccNwmW7Xnj/kMA/NvYZJDbVcRXGG7FY4yrE2k2u0n6Bm7F G2OR27Sf4pRhhLUHC1x6+vAxI4wSQTQKxW3u5Ocfw8MRdBuWMmGKe0/ky/0kOc2V 4GB5zGSySHaX1PhvLHRzuHBrvWQMP2netfTyGuLL/ymW3i6ydEP8zUhvduX0K5is Y2RSW5UMq1cjJNrVfvcUAsz+NX9ji9s/qhxXnbJb93TeeRvoTWcJRDNgxLlPFH7c pSwm22uB41/eytjEEPwE9jMCNPeRdokQfp010fJ8uWUqhhIOQm/oJZOxVRPz8PiQ mxVso0oP75cQkPBjBJ0YWcOBSRWGRA== =Cze0 -----END PGP SIGNATURE----- --Kj7319i9nmIyA2yE--