Re: Can't set encryption key for contact

On Monday 17 May 2010 22:35:21 Ingo Klöcker wrote:
> Just to give a bit more details... (see below)
> 
> On Monday 17 May 2010, Anne Wilson wrote:
> > On Monday 17 May 2010 00:07:52 Pascal Bernhard wrote:
> > > Hey all,
> > >
> > > I'm encountering the following problem with Kmail:
> > > When trying to set the encryption preferences for my contacts in
> > > the address book (of Kmail), I can see the available public keys,
> > > but when I try to pick one, the button OK is not activated. The
> > > keys have the trust level set to "Fully" via Kgpg, though I have
> > > not signed them, as I do not know the people that well.
> 
> It is a common misunderstanding to think that the trust level refers to
> your trust in the key, but that's not what the trust level refers to.
> The trust level (also called the "owner trust") assigned to a key tells
> gpg how much you trust the owner of the key with respect to signing
> other keys. Consequently, the trust level does not have any influence on
> the validity of the corresponding key. Instead it does influence the
> validity of other keys signed with this key (or rather signed by the
> owner of this key, hence "owner trust"). I hope this explanation was
> somewhat understandable.
> 
> Given that you do not know the key owners very well you might want to
> lower your trust in them. Otherwise, all keys signed by them will
> automatically be valid for you now that you have locally signed the
> keys.
> 
> > > The
> > > encryption settings work well with an older contact, I already
> > > sent encyrpted mails to, when still using Ubuntu 9.04 on my old
> > > computer. I have switched to Debian Squeeze which comes with Kmail
> > > 1.12.4 and KDE 4.3.4. Gnupg2 is version 2.0.14-1, Gnupg 1.4.10-2
> > > is also installed, but I cannot remove it, since this would
> > > deinstall Akregator & Kontact too.
> > > Any advice would be appreciated.
> >
> > The fact that you are willing to exchange encrypted mail with a
> > person denotes a certain level of trust, and gpg has a facility for
> > this.  If you use
> >
> > gpg --lsign-key xxxxxxxxx (the key's 8-character shortform)
> >
> > it 'local-signs' the key.  A local-signed key of course should not be
> > uploaded to a keyserver, as you are not in a position to guarantee
> > to someone else that there has been adequate checking.  It should,
> > though, satisfy the needs for signing and encrypting mail in KMail.
> 
> FWIW, uploading a local signature (which is also known as non-exportable
> signature) is not easily possible (if it is possible at all). Therefore,
> one does not need to worry that one could upload a local signature
> accidentally.
> 
> 
> Regards,
> Ingo
> 
Hi Ingo, 

thank you for the explanation about trust levels. In fact, I wasn't aware 
about the implications of the trust level on other keys, having signed, the 
key I trust know. (Did I get that right? In short, with trusting the key I 
declare that I believe the trust others have set into the key owner in 
question is correct. Did I understand that right?). I guess, I will lower the 
trust level, though I have no reason to have any reservations towards the 
keys' owners. It's just that I do not know them personally, and did not want 
to sign something too rashly.

Thanks a lot for all your help and clarifications, 

Pascal
-- 




Pascal Bernhard
Schwalbacher Straße 7
12161 Berlin
Germany

Phone +49 30 60 92 37 72
Cell +49 177 4 19 26 34

www.secunergy.com

Je me regarde pour me désoler,
je me compare pour me consoler. 

My Public PGP-Key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.9 (GNU/Linux)
mQGiBEsRc44RBAC5eI8WQR3apHgPEX9v7WaO3VzxgbjYaDPBR9un0Q/OQhHgRSXA
MeKgpd0stEpf9JSxWwqvHSf6haI8uE7pLEGnmr8/qOSymPgGX4mUB2xeLT5FXBsb
aAB4C/0ldlnOJTOczLLzX7uHsvn5KL6/Si9/qhGKRtaBjCrWSudlJVYaewCgpqxF
m991BcT5lMTWZgHJz7vjtx0EAJWXV2FKKk5miqZLmJWtwzds9+SZ76KEgg82zeDQ
NzzGuZUkJa8pqyGwJtgzt3keJkiJ4gpp23VedY4fZbYTR4rW6XMCLTwYd+1sb1wN
jyQNrSUMfa5t8Vx8EX2C/W26rz7DNvi/WgbpCvfOt9yfBsMzdgVZZnJ3KVcAb3Vy
A4oSA/0TNk6B4/zBGciMYyDMfgpcGdhSF/5lPn5o1ldzOboOgKmMINH8FI0Z6ZNH
wmBako1UCkDi/lG0n8mBOmNLH2u08tgLnuYZZaURmIQX6urmHa+qRIdHFn62uX4L
IvT9RHSNWHnuzTGuwek7+EexUSslit8IdD9rG244MKLtLjJb+LRqUGFzY2FsIEhh
c2tvIEJlcm5oYXJkIFtHb29nbGVtYWlsXSAoU2NobPxzc2VsIGb8ciBHb29nbGVt
YWlsLUtvbnRvKSA8cGFzY2FsLmhhc2tvLmJlcm5oYXJkQGdvb2dsZW1haWwuY29t
PohgBBMRAgAgBQJLEXOOAhsDBgsJCAcDAgQVAggDBBYCAwECHgECF4AACgkQyzAK
l6ged6+P+ACfY3Ab7bNCnJxYuscXbiLTFemGylkAoIHppW8UWol4ri5JNpG4OSdZ
L0XGiEYEEBECAAYFAksRdDMACgkQ0mMaovwTVsfgLQCfRA7bciviolPIq2GhUd8a
ySLsJcQAnj0IisUZkKFmCSx7/LLfdqJSCsz9uQQNBEsRc44QEACKS/zpFsjbJvso
oxu0shux6RxfeODduRcYPtj6fRZfIGzXgyaOYililaCgCTwl9FbQO1/zcIofF3ow
xSErvHl7i+BzNZp83Jj8cod7g2flFkeLqo+YsclAq4PfIPG9wj4srzVP+xY72EzH
UsvAvX6to2hAEFNcsosp4FovaSqkUXZLIKb3mEPi0AvTBJgKTl/eDAR42HT146DW
OehvDdR8XaB8owgtxtAMvT1B+wJk4nyvrE2z5IzSrW37/tvEGDcTisq3HBDGNn1n
61AOvT/JD1tZkN4cOa8+auG/3uKYWOeuDqE9fC7tTtkP7K4p9XnDivrGsgnHSjCm
U1QNvY4jY5BuctoOpZccebI4Q6n1np/gXPekS6B68HROklBjnIRDGBUTGu0xgyoo
D2E+iDTDzZj8XDwMo05/3DzY0tzmPTuTD3REcgA1aIADh1xB1oXSZ/ElN/c5zjCa
Y06krz+Ad5CUJ9wkgBTsLeHjkNbZO09OsLp9y1c2IW3p3mx8Ll7gzhr4bl564JAI
A1ARM3iptKC4sqal6nSpu72a9KZh4ga7grG2VfhWwTm8TM2SC3EuwZF3yjgSVXdC
Gt2t0mEqguCJ5J4AfEqq84le//2IIVNRZPn1WdSahdchohC73501EHCaIF81Cxva
GdVYUYsX/yTelLB4gMys8E0QX1/88wADBRAAiKna5cBqmTOIJHjLElkit7qCnoXI
PcL9JeYMOxkodI1HNP7bAgLEk7QCqrQ/ZQsfICvtuWqprqcnenoh/qYtUnUy7QT/
9Y2Vja2JMj5k1Gwk8N0APad8s7j7I4n4h9rO71sLUMfL8sspkvLpY7r+/HfCiX0x
AEwHV7yOG97Ev16g4cI5HcJMG9dgIRoTChlruSqgQLFWhJ3Go9k5OXZpcqDY6Uuy
lNJydZ85wdUjAY0SdBdLLM7qpEIVrz06FSq/x1VFIkudVxVsNXciDmoWtMBykSEJ
slKXHYcUJPR0FjBhShZy5ik6YV6UUkB4EhlA/S65GHRkP7dUwGIvp/rDXAyOeq2c
Tr2Xq4sqrkIIQFVNWXDLEs4noaJtNfsmIMWaTi2x7m3NDYjPAAiiN2TbzU+BiQgq
co3lSKyA4gh2aWuMznKA2QjVdH1syPMAN4flxji+BD1u2549HEvqMvY/OEMzdKyA
mBxfMhcQGqX7Z9dYY8tqW84RD2zwYoyyZxrxYE0+B9nAKwbecT9G7fBjWWo4qAjz
N0kYUN/oTSu9ML668G2yUA5PQU/bjp+pR+M9RRBU7Tg2RAmPkRiT39DPNGJQdMrY
RJ+WoUWARwTbVRaU1iBe4ol07AtmeT1L9Jh6zATS1VFNwk7IeqOdkRAa1mRuXRTa
CaBMjO/wiu4s4OWISQQYEQIACQUCSxFzjgIbDAAKCRDLMAqXqB53r7d6AJ9Tk4aF
ELaRXejLhvjlEN+XnPz8TgCbBbMgbyYTwUqdzSVuJc3DryQg+k8=
=tNxd
-----END PGP PUBLIC KEY BLOCK-----

_______________________________________________
KDE PIM users mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/kdepim-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAkvxsisACgkQyzAKl6ged6/xygCeIIObrFV95K9Zc/Ir/akXYYu6
eJQAoJbb4tjUrn4+yuJe0UgbYGEdOV05
=Z95E
-----END PGP SIGNATURE-----