Bitcoin Forum
September 01, 2024, 11:19:50 AM *
News: Latest Bitcoin Core release: 27.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: PGP signature help  (Read 659 times)
Chris! (OP)
Legendary
*
Offline Offline

Activity: 1382
Merit: 1122



View Profile
July 12, 2017, 11:00:07 PM
Last edit: July 13, 2017, 04:54:08 PM by Chris!
 #1

Figured it out. Thanks quickseller for the response.
Quickseller
Copper Member
Legendary
*
Offline Offline

Activity: 2968
Merit: 2370


View Profile
July 12, 2017, 11:08:08 PM
 #2

It is trivial to change/add an email address to your GPG keys. There is zero verification required to add any email address to a GPG key.

You will probably want to see if you can independently verify the GPG key associated with a signature you are verifying before relying upon that signature. 

★ ★ ██████████████████████████████[█████████████████████
██████████████████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████████████
███████████████████████████████████████████████████████████████████
████████████████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████████████
███████████████████████████████████████████████████████████████████
█████████████████████████████████████████████████████████████████████
█████████████████████████████████████████████████████
██████████████████████████████████████████████████████████████████
█████████████████████████████████████████████████████████████
████████████████████████████████████████████████████████████
███████████████████████████████████████████████████████████████████
★ ★ 
Chris! (OP)
Legendary
*
Offline Offline

Activity: 1382
Merit: 1122



View Profile
July 12, 2017, 11:13:25 PM
Last edit: July 12, 2017, 11:49:40 PM by Chris!
 #3

It is trivial to change/add an email address to your GPG keys. There is zero verification required to add any email address to a GPG key.

You will probably want to see if you can independently verify the GPG key associated with a signature you are verifying before relying upon that signature.  

Ok, here's the problem. I don't know how to do any of that. If it's trivial that's probably a good sign. But how do I independently verify their signature?

Omg I just realized something that makes me feel a LOT better. I found the listing on a random website, didn't trust it and went directly to their own website to see about the job. It was there and I applied.

Ok, so anyway this is now a tech question: how do I send someone a PGP signed message on thunderbird with enigmail installed if I have a PGP signed message from a different email address?
tspacepilot
Legendary
*
Offline Offline

Activity: 1456
Merit: 1081


I may write code in exchange for bitcoins.


View Profile
July 13, 2017, 07:11:44 PM
 #4

Ok, so anyway this is now a tech question: how do I send someone a PGP signed message on thunderbird with enigmail installed if I have a PGP signed message from a different email address?

I don't know how to use windows.  If I understand your question, you want to add an email address to your gpg key?  If that's the case, you're going to use gpg edit-key adduid.  The docs:

https://www.gnupg.org/gph/en/manual/r899.html
Chris! (OP)
Legendary
*
Offline Offline

Activity: 1382
Merit: 1122



View Profile
July 16, 2017, 12:00:27 PM
 #5

Ok, so anyway this is now a tech question: how do I send someone a PGP signed message on thunderbird with enigmail installed if I have a PGP signed message from a different email address?

I don't know how to use windows.  If I understand your question, you want to add an email address to your gpg key?  If that's the case, you're going to use gpg edit-key adduid.  The docs:

https://www.gnupg.org/gph/en/manual/r899.html

I was in a rush to get it up and running and couldn't find a step-by-step guide on how to do it on Linux. I much prefer to use Linux mint.

It turned out it was an easy problem and I was just a newbie. Basically I send to email address Bob@legitimatecompany.com and check off the PGP key for bob@gmail.com. I have no idea why I was making it so complicated!

On that note, does anyone know of a good guide that gives step-by-step instructions for Linux? Trying to figure out what to type in terminal is near impossible for me because I don't know what any of the commands mean.
tspacepilot
Legendary
*
Offline Offline

Activity: 1456
Merit: 1081


I may write code in exchange for bitcoins.


View Profile
July 17, 2017, 09:18:22 PM
Last edit: July 20, 2017, 03:38:19 PM by tspacepilot
 #6

Quote
I don't know how to use windows.  If I understand your question, you want to add an email address to your gpg key?  If that's the case, you're going to use gpg edit-key adduid.  The docs:

https://www.gnupg.org/gph/en/manual/r899.html

I was in a rush to get it up and running and couldn't find a step-by-step guide on how to do it on Linux. I much prefer to use Linux mint.

It turned out it was an easy problem and I was just a newbie. Basically I send to email address Bob@legitimatecompany.com and check off the PGP key for bob@gmail.com. I have no idea why I was making it so complicated!

On that note, does anyone know of a good guide that gives step-by-step instructions for Linux? Trying to figure out what to type in terminal is near impossible for me because I don't know what any of the commands mean.

This web pages give a step by step for adding an email address to a gpg identity:

https://www.katescomment.com/how-to-add-additional-email-addresses-to-your-gpg-identity/

The ssl cert is out of date on that site (as of right now) but the content is still correct.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!