From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: zsh-users-return-23692-ml=inbox.vuxu.org@zsh.org X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2 Received: from primenet.com.au (ns1.primenet.com.au [203.24.36.2]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id 0959fd29 for ; Tue, 2 Oct 2018 08:32:07 +0000 (UTC) Received: (qmail 13908 invoked by alias); 2 Oct 2018 08:31:53 -0000 Mailing-List: contact zsh-users-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Users List List-Post: List-Help: List-Unsubscribe: X-Seq: 23692 Received: (qmail 4017 invoked by uid 1010); 2 Oct 2018 08:31:53 -0000 X-Qmail-Scanner-Diagnostics: from mailout1.w1.samsung.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.99.2/21882. spamassassin: 3.4.1. Clear:RC:0(210.118.77.11):SA:0(-6.9/5.0):. Processed in 2.679205 secs); 02 Oct 2018 08:31:53 -0000 X-Envelope-From: p.stephenson@samsung.com X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | DKIM-Filter: OpenDKIM Filter v2.11.0 mailout1.w1.samsung.com 20181002082358euoutp01cc9a6c165901440bed2901686d2332be~ZvRN1ds1t0083200832euoutp01M DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samsung.com; s=mail20170921; t=1538468639; bh=GWjLHu32u3H1gMA6kvWRc098NRTtHRDSL3680aCe9tE=; h=Date:From:To:Subject:In-Reply-To:References:From; b=LpkUHwOlLeio0rFVZwWrXzI9AnIgEVvB9lOKlqkOrES2K9ke9mmlUIUSMb4ucS80X ex5t6Bhks9wsBgvoMJqPuwaIvf28xJxoeEwJo7Jk6V7E0VFbQFfcM3i0UIG4eqqlxl +9Rc1PtC/g/1k/2C5kWTQIdxiAH8tM0SrOvwd1to= X-AuditID: cbfec7f2-5e3ff70000001159-06-5bb32b1e190a Date: Tue, 2 Oct 2018 09:23:56 +0100 From: Peter Stephenson To: Subject: Re: PGP key question In-Reply-To: <20181002075117.GA7637@neptune.home.b999.me> Organization: SCSC X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.30; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrNIsWRmVeSWpSXmKPExsWy7djP87py2pujDY41CVjsOLmS0YHRY9XB D0wBjFFcNimpOZllqUX6dglcGWt+3WQsOM5eMW3TRKYGxnusXYycHBICJhLnb29j7mLk4hAS WMEocfHiNiaQhJBAD5NE3xEviEQ3k8SjRYfgOh7tuM8EkVjOKHHnw0J2uKoT6xZBOacZJTas uMwGMes8o8TSiQ5djBwcLAIqErfPMYOE2QQMJaZums0IYosIiEs8m/mNBcQWFpCV2D/pFZjN KWApMef/dBaQVn4BIYkLzbYQR9hLHN1zEuxSXgFBiZMzn4CVMwvIS2x/OwfsHQmBz2wSl278 YIcoKpOYuqaJGWSOhICLRN+aDIg5whKvjm9hh7BlJP7vnM8E0dvOKLFm0mt2CKeHUWLT0TuM EFXWEn23LzKCDGIW0JRYv0sfYqajxLrXdhAmn8SNt4IQ5/BJTNo2HWorr0RHmxDEDDWJHU1b GScwKs9C8sAsJA/MQhi/gJF5FaN4amlxbnpqsWFearlecWJucWleul5yfu4mRmASOP3v+Kcd jF8vJR1iFOBgVOLhZZDfFC3EmlhWXJl7iFGCg1lJhPd/KFCINyWxsiq1KD++qDQntfgQozQH i5I477J5G6OFBNITS1KzU1MLUotgskwcnFINjJVTl1dIt3xZsPireaOxOcM7joyFWyR9q3bI cVSkvrPbynv7uZjm4x1tFudvPrv746/+rtzUbFOOTwtS9zOd9lgqVDTn6ruvN6/8ObCrIrvK wkFsqg/Xk2Mukcl2KexOO574K831XJWoYxQzXX5BwapMhzSTttbp/Vy3BI3Ob5729J3s37jj 8kosxRmJhlrMRcWJAFwlJBr+AgAA X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmkeLIzCtJLcpLzFFi42I5/e/4PV1Z7c3RBlv3a1nsOLmS0YHRY9XB D0wBjFF6NkX5pSWpChn5xSW2StGGFkZ6hpYWekYmlnqGxuaxVkamSvp2NimpOZllqUX6dgl6 GWt+3WQsOM5eMW3TRKYGxnusXYycHBICJhKPdtxnArGFBJYySrx7ZgcRl5H4dOUjO4QtLPHn WhdbFyMXUE0nk8Te1p+MEM5pRom+FwegMucZJe407QIaxcHBIqAicfscM0g3m4ChxNRNsxlB bBEBcYlnM7+xgNjCArIS+ye9YgEp5xVwlvh6LBMkzClgKTHn/3QWiJEHGSXWTvjEClLDLyAk caHZFuIge4mje06CHc0rIChxcuYTsJHMAjoSJ1YdY4aw5SW2v53DPIFReBaSsllIymYhKVvA yLyKUSS1tDg3PbfYSK84Mbe4NC9dLzk/dxMjMCK2Hfu5ZQdj17vgQ4wCHIxKPLwM8puihVgT y4orcw8xSnAwK4nw/g8FCvGmJFZWpRblxxeV5qQWH2I0BQbFRGYp0eR8YLTmlcQbmhqaW1ga mhubG5tZKInznjeojBISSE8sSc1OTS1ILYLpY+LglGpgLBXaYdl3Xt3cXv+nlMSEHwnv8hrm WWyYmSNR4lEptbZUxUxnx0etP9P4N9QazX6oNmtCkFXHoRXW9jvSF5y4+GD7W09j/SyD1avO vp1Rtz1pC/+JpSt+1N1Jmj5NVuIUY7bzjnvXOyPf/JSP45xcaBZ/6q3YqV2eV49E73/yPaSu O91lmZFrgRJLcUaioRZzUXEiAFIT3eSeAgAA Message-Id: <20181002082357eucas1p15daa8f2c0502c104b7ffe966c528571e~ZvRMqKvXa1039810398eucas1p1o@eucas1p1.samsung.com> X-CMS-MailID: 20181002082357eucas1p15daa8f2c0502c104b7ffe966c528571e X-Msg-Generator: CA Content-Type: text/plain; charset="utf-8" X-RootMTR: 20181002075914epcas5p426151406b599d2f9553ce3294da88016 X-EPHeader: CA CMS-TYPE: 201P X-CMS-RootMailID: 20181002075914epcas5p426151406b599d2f9553ce3294da88016 References: <20181002075117.GA7637@neptune.home.b999.me> On Tue, 2 Oct 2018 08:51:17 +0100 Ben Oliver wrote: > On 18-10-02 01:21:03, Clark Dunson wrote: > >gpg: WARNING: This key is not certified with a trusted signature! > > > >gpg: There is no indication that the signature belongs to the owner. > > > >Primary key fingerprint: E966 46BE 08C0 AF0A A0F9 0788 A5FE EE3A C793 7444 > > > > Subkey fingerprint: 6EB6 0B63 7CE5 ACBF 2449 A2DA DB27 E997 429A F20C > > > >Is there a concern here? > > This is just a warning that you have not personally signed the key, ie > verified that you know this person. > > gpg just knows that key X was used to sign the package, it doesn't know > if the key truly belongs to the owner - that's on you to find out. If > you are 100% sure (usually after meeting the owner) you can sign the key > to avoid the warning. To fill in the obvious: we're quite sure the releases were actually signed either by Daniel or me. pws