Package: gnupg-doc Version: 2003.04.06+dak1-0.1 Severity: normal In the GNU Privacy Handbook, in the table following Figure 3-1 in the "Using trust to vavlidate keys" chapter, there is one error and one thing to clarify.
The error is that, in the last case, Dharma's key is fully valid, but its name is not written in the appropriate cell. The clarifications are described in the following diff, based on the text version of the manual: ================================================================ diff -pub /tmp/old.txt /tmp/new.txt --- /tmp/old.txt 2009-05-08 11:12:59.951863828 +0200 +++ /tmp/new.txt 2009-05-08 11:23:28.119826695 +0200 @@ -1,16 +1,28 @@ The web of trust allows a more elaborate algorithm to be used to validate a key. Formerly, a key was considered valid only if you signed it personally. A -more flexible algorithm can now be used: a key K is considered valid if it +more flexible algorithm can now be used: a key is considered fully valid if it meets two conditions: 1. it is signed by enough valid keys, meaning + you have signed it personally, - + it has been signed by one fully trusted key, or + + it has been signed by one fully valid, fully trusted key, or - + it has been signed by three marginally trusted keys; and + + it has been signed by three fully valid, marginally trusted keys; and 2. the path of signed keys leading from K back to your own key is five steps or shorter. + +Additionally, a key is considered marginally valid if it meets two +conditions: + + 1. it is signed by one fully valid, marginally trusted key; and + + 2. the path of signed keys leading from K back to your own key is five steps + or shorter. + +When validating a key, GnuPG lets you know about the key's validity -- whether +full, marginal or none at all. You decide whether marginal validity is enough +for your purpose. ================================================================ -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'testing-proposed-updates') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores) Locale: LANG=C, lc_ctype=it...@euro (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C) Shell: /bin/sh linked to /bin/bash gnupg-doc depends on no packages. gnupg-doc recommends no packages. Versions of packages gnupg-doc suggests: ii gnupg 1.4.9-4 GNU privacy guard - a free PGP rep -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org