GPG Keysigning at FUDCon - INSTRUCTIONS

[Matt Domsch]

On Mon, Jan 07, 2008 at 05:14:15PM -0600, Matt Domsch wrote:
> On Wed, Jan 02, 2008 at 09:13:32PM -0600, Matt Domsch wrote:
> > On Wed, Jan 02, 2008 at 09:44:23PM -0500, Todd Zullinger wrote:
> > > If you haven't seen it before, I'd recommend giving a look at the
> > > "Efficient Group Key Signing Method" by Len Sassaman and Phil
> > > Zimmermann, documented at http://sion.quickie.net/keysigning.txt
> > > 
> > > It cuts a lot of the tediousness out of a key signing involving more
> > > than just a few people.
> > 
> > yep.  That's basically my plan. So far only ~14 people have sent me
> > keys, so even bicycle chain won't take but a few minutes.  I'll email
> > everyone who has sent keys, and fedora-devel, the instructions early
> > next week for getting the plaintext list of keys, the keyring I've
> > compiled from the sent fingerprints, the SHAx sums and the rest.
> 
> 
> I've compiled the list of keys for the FUDCon keysigning.  These 20
> are whom I have.  If you're not on this list, and still want to
> participate, you may, details to follow.


I meant to do the validations using the fingerprints, not just the
--list-keys output.

http://domsch.com/linux/fedora/fudcon2008/fudcon-keysigning-fingerprints.txt
http://domsch.com/linux/fedora/fudcon2008/fudcon-keysigning-fingerprints.txt.md5sum
http://domsch.com/linux/fedora/fudcon2008/fudcon-keysigning-fingerprints.txt.sha1sum
http://domsch.com/linux/fedora/fudcon2008/fudcon-keysigning-fingerprints.txt.sign
  (signed by me)


Please download the .txt file, and run md5sum and sha1sum against it
and compare with the values posted there.  They should match.  Also be
sure your key fingerprint is correct in that file.


These, the keyring, etc. can be found at
http://domsch.com/linux/fedora/fudcon2008/.  Please download and
validate them yourselves.

Thanks,
Matt

-- 
Matt Domsch
Linux Technology Strategist, Dell Office of the CTO
linux.dell.com & www.dell.com/linux