Re: [Biglumber-news] new (2004-04-18) keyanalyze results (+sigcheck)

Jason Harris <[email protected]> Sun, 18 Apr 2004 23:30:23 -0400
Newsgroups gmane.comp.encryption.gpg.user,gmane.comp.encryption.pgp.keyserver-folk
Message-ID <[email protected]>
On Mon, Apr 19, 2004 at 01:56:45AM +0100, Matthew Wilcox wrote:
> On Sun, Apr 18, 2004 at 06:41:26PM -0400, Jason Harris wrote:

> > New keyanalyze results are available at:
> > 
> >         http://keyserver.kjsl.com/~jharris/ka/2004-04-18/
> > 
> > Signatures are now being checked using keyanalyze+sigcheck:
> > 
> >   http://dtype.org/~aaronl/
> > 
> > but preprocess.keys.no-sigcheck.bz2 is available with today's report
> > to facilitate running a non-sigcheck analysis, for comparison.
> 
> Seems a bit broken to me.  The following keys are no longer listed in
> the report:
> 
> 	191FCD8A	Kyle McMartin

NB:  Everyone, please followup only to keyanalyze-discuss and/or
follow this thread there:

  http://www.dtype.org/pipermail/keyanalyze-discuss/

Reply-To: has been set.  Thanks.


Some of the selfsigs expired this key on 2003-03-18, but newer
selfsigs don't expire the key.

> 	4975F947	Curtis Ireland (Personal Key)

2003-07-04, then removed.

> 	E2B11082	Jody McIntyre

2003-11-27 for the selfsig and many of the cert. sigs.
GPG won't encrypt to it.

> 	7D2ED788	Richard Guy Briggs (gpg-lap)

2001-08-30, then removed.

> 	12F506C8	Peter Sjoberg

2003-04-27, then removed.

> 	1B9200FC	Bruce R. Miller (personal use)

The userid with all the external signatures was revoked.

> 	2D9179B0	Scott Moynes

2002-01-21 and 2004-02-01, both of which have passed.
GPG won't encrypt to it.

> ... and that's just from the set of 79 keys in my LUG.  I can probably
> find other no-long-appearing keys if necessary.  I've signed many of
> these keys myself, so I know them to be valid.

By design, expired keys aren't considered.  But, it looks like older
selfsigs with expiration dates aren't being overridden by newer selfsigs,
which is a definite error.  Aaron?

-- 
Jason Harris           |  NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
[email protected] _|_ web:  http://keyserver.kjsl.com/~jharris/
          Got photons?   (TM), (C) 2004

_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users
signature.asc (application/pgp-signature, 187 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAg0fOSypIl9OdoOMRAn3SAKC9ZY2wSVFw+oqAjJ1ZFDxdResWxQCgw+/S
wGXxrey/uHp9jDcce8R6b+o=
=HuqT
-----END PGP SIGNATURE-----