Discuss mailing list

[simple AT sdf.org]

Probably my insistence on interacting with the online world as if it were
still the 1990s is partly to blame; I still mostly use a CLI environment:

  % > gpg --search-keys verax AT 8chan.co
  gpg: searching for "verax AT 8chan.co" from hkp server keys.gnupg.net
  (1)     Verax <verax AT 8chan.co>
            3072 bit DSA key 0D12CB17, created: 2015-03-19
  Keys 1-1 of 1 for "verax AT 8chan.co".  Enter number(s), N)ext, or Q)uit > 1
  gpg: requesting key 0D12CB17 from hkp server keys.gnupg.net
  gpg: key 0D12CB17: public key "Verax <verax AT 8chan.co>" imported
  gpg: Total number processed: 1
  gpg:               imported: 1

  % mailx
  ..
  & |gpg
  Pipe to: "gpg"
  ..
  gpg: Signature made Fri Dec  9 22:54:28 2016 PST using DSA key ID 0D12CB17
  gpg: Good signature from "Verax <verax AT 8chan.co>"
  gpg: WARNING: This key is not certified with a trusted signature!
  gpg:          There is no indication that the signature belongs to the 
owner.
  Primary key fingerprint: 87C2 37C6 B247 C3C2 25DC  A733 8FCD 9863 0D12 CB17
  "gpg" 72/3182

The previous message (with the PGP/MIME sig) had signature.asc attached
but perhaps the format is different.  Also I don't think gpg (not gpg2)
has a PGP/MIME option; didn't see it mentioned in the manpage.

--Jeff

Verax <verax AT 8chan.co> wrote:
> Urk.  Enigmail verifies it on my end.  How did you download it?
>
> This is definitely my fault for using PGP/MIME.  I've attached a
> clearsigned copy for you.
>
> --Verax
>
> simple AT sdf.org wrote:
> > Verax <verax AT 8chan.co> wrote:
> > 
> >> Greetings and merry Christmas to the OpenNIC community.
> >>
> >> 2016 has come to an expiration, and so have our keys. The 2017 KSK and
> >> 2017 January ZSK will be added to the zone on 2016-12-15, and become
> >> active on 2017-01-01.
> >>
> >> I'm including them here (signed with my PGP key) to verify them for
> >> anyone who cares about that sort of thing.
> >> ..
> > 
> > % gpg --verify /var/tmp/signature.asc /var/tmp/verax.txt
> > gpg: Signature made Fri Dec  9 19:55:57 2016 PST using DSA key ID 0D12CB17
> > gpg: BAD signature from "Verax <verax AT 8chan.co>"
> >      ^^^