<back
SLUG Keysigning - Verification
You still don't know that the person whose details and ID you checked actually controls the private key they claim to. The easiest way to check this is for everyone to sign a piece of text, as signing requires use of the private key.
- Download this file: signthis.txt
- Sign the file: gpg --output signthis.sig --sign signthis.txt
- Attach signthis.sig to a mail back to me
- Download everyone elses signthis.sig
- Verify that the signature is correct: gpg --output tmp --decrypt signthis.sig; diff signthis.txt tmp