<div dir="ltr">January 2014 Linux Journal was all about security and I THINK there was article in there explaining the basics of it & its uses (pgp/gpg). </div><div class="gmail_extra"><br clear="all"><div><div dir="ltr">
<span style="font-family:arial;font-size:small">Unix is basically a simple operating system. But you have to be a genius to understand the simplicity. D.R.</span><br></div></div>
<br><br><div class="gmail_quote">On Mon, Apr 7, 2014 at 12:11 PM, Dan Kaiser <span dir="ltr"><<a href="mailto:dank2878@gmail.com" target="_blank">dank2878@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">Does anyone in the group have advice on where new users should go for remedial education in PGP/GPG and the benefits of Keybase.io? </p>
<p dir="ltr">I've read the about blurb on the KB site, and get that it is about connection/encryption key sharing, and I feel like I should really want one of the KB invites, but I'm not going to ask for one until I can really use it.</p>
<p dir="ltr">Thanks,</p><div class="HOEnZb"><div class="h5">
<div class="gmail_quote">On Apr 7, 2014 11:32 AM, "Rick Troth" <<a href="mailto:rmt@casita.net" target="_blank">rmt@casita.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
friends --<br>
<br>
I'm pretty geeked about Keybase.io and excited to see more of us on it.<br>
<br>
Expanding the global web-of-trust helps everyone.<br>
Have been wanting to see more PGP/GPG action at regular COLUG meetings.<br>
Am thinking we should at least mention "opportunistic countersigning" at<br>
most meetings. That is, if anyone present is in need of signatures or is<br>
willing to sign, make a point to do so after the meeting or during a<br>
break. (Quick face-to-face without the drawn out formality of a key<br>
signing party. Works well for two or three at a time.)<br>
<br>
Keybase.io offers alternative assurance methods. If you can prove that<br>
you own various internet resources, there's a good chance the related<br>
public key really belongs to you. Makes sense.<br>
<br>
But I'm still only "tracking" one person in KB space. I won't track<br>
someone who's public key I did not vet with the usual face-to-face<br>
dance. Doesn't mean I won't use a public key I got from KB, just that I<br>
won't "sign" it (which is what tracking sort of implies).<br>
<br>
I noticed that public keys on KB don't have PGP/GPG signatures of people<br>
you track. Am realizing (now!) that makes sense because KB tracking is<br>
not the same as the traditional PGP signing.<br>
<br>
-- R; <><<br>
<br>
<br>
<br>
_______________________________________________<br>
colug-432 mailing list<br>
<a href="mailto:colug-432@colug.net" target="_blank">colug-432@colug.net</a><br>
<a href="http://lists.colug.net/mailman/listinfo/colug-432" target="_blank">http://lists.colug.net/mailman/listinfo/colug-432</a><br>
</blockquote></div>
</div></div><br>_______________________________________________<br>
colug-432 mailing list<br>
<a href="mailto:colug-432@colug.net">colug-432@colug.net</a><br>
<a href="http://lists.colug.net/mailman/listinfo/colug-432" target="_blank">http://lists.colug.net/mailman/listinfo/colug-432</a><br>
<br></blockquote></div><br></div>