We are running a PGP keysigning party during OLS. This is an excellent chance to meet up with a group of geographically distributed developers and expand the Web Of Trust.

Signup for the keysigning party is now CLOSED. Sorry. We'll be running another one next year though.

If you signed up, check the attendee list to make sure you're on it.

During the symposium, you will need:

• A writing implement and/or something to lean on while you do it.
• A hardcopy of your fingerprint to be sure nobody's tampered with the one on the sheet.
• A hardcopy of the md5sum of the sassaman.txt file (and optionally the sha1sum too). See below.
• Photo ID. A passport is recommended.
• To be there yourself, you can't delegate this.

When you sign a key, you are stating that this key belongs to this person. In order to do that, you have to verify that the fingerprint on the piece of paper matches the fingerprint belonging to that key and the identity of the person who claims this to be their key.

The two boxes by each name let you record which pieces of information you've verified about this fingerprint. The first box is to indicate you verified their fingerprint is correct and the second box indicates that you've verified their ID.

During the conference, make an effort to meet up with as many people and verify their identity (photo ID is recommended). If you can't make the keysiging BOF, you should also check that both of you have the same md5sum (and optionally sha1sum) of the sassaman file.

Due to the large number of people wishing to participate in the keysigning, if everybody read out their fingerprint it would take the full hour just to do fingerprint verification. And everybody would get bored. Instead, we will use a more efficient method for verifying everybody's fingerprint en masse.

Once that is done, each person should try to verify the identity of anyone who they haven't already managed to meet up with during the conference.

After the party is over, wait until you're back home at a computer you trust. Then download the keys from a keyserver and check the fingerprints match the contents of the sassaman file. Sign the keys and send them back to the keyserver. Then check back here to see who has signed whose key.

For more information on keysignings, the Web of Trust, GnuPG and Public Key Infrastructure, try the following links:

• Keysignings
• The GNU Privacy Handbook
• Public Key Infrastructure
• The OpenPGP Alliance

Sponsors

Minor Sponsors

Wireless

Supporters

register | login | call for papers | schedule | talks | tutorials | bofs | venue | travel | faq | link us | sponsors | contact | home

Copyright © 2007 Linux Symposium Inc. All rights reserved.
Linux is a registered trademark of Linus Torvalds.