From owner-freebsd-questions@FreeBSD.ORG  Wed Oct  1 17:49:13 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 54EFF16A4B3
	for <freebsd-questions@freebsd.org>;
	Wed,  1 Oct 2003 17:49:13 -0700 (PDT)
Received: from obsecurity.dyndns.org
	(adsl-64-169-107-253.dsl.lsan03.pacbell.net [64.169.107.253])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8EEC843FF9
	for <freebsd-questions@freebsd.org>;
	Wed,  1 Oct 2003 17:49:11 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5])
	by obsecurity.dyndns.org (Postfix) with ESMTP
	id C624366D32; Wed,  1 Oct 2003 17:48:53 -0700 (PDT)
Received: by rot13.obsecurity.org (Postfix, from userid 1000)
	id 91801839; Wed,  1 Oct 2003 17:48:53 -0700 (PDT)
Date: Wed, 1 Oct 2003 17:48:53 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Paul Murphy <pnmurphy@cogeco.ca>
Message-ID: <20031002004853.GA15441@rot13.obsecurity.org>
References: <XFMail.20031001140907.ah46@mlz.us>
	<200310011315.05004.ecrist@tech-con-inc.com>
	<20031001182729.GA14111@rot13.obsecurity.org>
	<20031001185105.197701ef.pnmurphy@cogeco.ca>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt"
Content-Disposition: inline
In-Reply-To: <20031001185105.197701ef.pnmurphy@cogeco.ca>
User-Agent: Mutt/1.4.1i
cc: freebsd-questions@freebsd.org
cc: Kris Kennaway <kris@obsecurity.org>
Subject: Re: Mail-list PGP Keys
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2003 00:49:13 -0000


--pf9I7BMVVzbSWLtt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 01, 2003 at 06:51:05PM -0400, Paul Murphy wrote:
> On Wed, 1 Oct 2003 11:27:29 -0700
> Kris Kennaway <kris@obsecurity.org> wrote:
>=20
> > On Wed, Oct 01, 2003 at 01:15:03PM -0500, Eric F Crist wrote:
> >=20
> > > How do I submit my keys?
> > >=20
> > > TIA
> >=20
> > 1) Don't middle-post
> >=20
> > 2) Read the URL provided.
> >=20
> > > > > Just a little pet peeve.
> > > >
> > > > AFAIK, most people use http://pgp.mit.edu to submit their keys.
> >=20
> > Kris
>=20
>  FWIW, have you checked _your_ pgp key lately, I always get:
>=20
> BAD signature from "Kris Kennaway <kris@citusc.usc.edu>"
>                 aka "Kris Kennaway <kris@FreeBSD.org>"
>                 aka "Kris Kennaway <kris@obsecurity.org>"

The copy in one of the PGP key networks is corrupted, and it's a
vulnerability in the keyserver system that there is no way provided to
correct this.  AFAICT you can corrupt any given key in the database by
uploading a mis-formatted signature to it, which the key servers do
not appear to adequately guard against (this is how mine became
corrupted).  Fetch the uncorrupted copy from the FreeBSD handbook or
my .plan on freebsd.org.

Kris

--pf9I7BMVVzbSWLtt
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQE/e3X1Wry0BWjoQKURAsSfAKDwrDDYztL87q5MnGhpw3V/DfHoLgCgikIb
7IEraGI16W4/MHj6XYteYgk=
=xyfH
-----END PGP SIGNATURE-----

--pf9I7BMVVzbSWLtt--