On Wed, Sep 12, 2001 at 12:44:23AM +0800, Rino Mardo wrote: > On Tue, Sep 11, 2001 at 05:43:34PM +0200 or thereabouts, Bas van Gils wrote: > > > > just recently I installed gpg on my machine (that is, after reading the > > article in Linux Journal). It works together with mutt brilliantly. No > > problem there. > > > > Now, I read a lot of debian mailinglists and noticed that a lot (all ?) > > of people in the Debian-organization post with a PGP-signature. Mutt > > "complains" that it can't verify the signatures because it doesn't have > > the public-keys in my key-ring. Makes sense ;-) > > > > I was wondering: is there an (easy) way of importing the keys of these > > people in my key-ring? Or do I have to look-up these keys at a > > key-server and import them 1 by 1 <guess that would be the `safe' thing > > to do..> > > > yes that's one way to do it assuming they're posting it to those > keyservers. another way is to get it from their websites. just consult > their sig lines. yet another way is to ask them to send you their > public keys.
If you set mutt and gpg up right, it will automatically get their public keys from the keyservers (I'm not sure which is responsible for this, gpg or mutt). gpg will still complain, but only because you have no way of knowing if those keys (from the keyservers) correspond to those people. -- David Roundy http://civet.berkeley.edu/droundy/
pgp9aPC2Opsd3.pgp
Description: PGP signature
