/[winpt]/trunk/doc/winpt.texi

Diff of /trunk/doc/winpt.texi

Parent Directory | Revision Log | View Patch Patch

-revision 226 by twoaday,
Mon Jun 12 13:40:21 2006 UTC
+revision 227 by twoaday,
Wed Jun 14 06:57:57 2006 UTC
 Line 8 
 This file is free under the terms of the
  Copyright (C) 2006 Timo Schulz
- Version 0.0.0
+ Version 0.1.0
  @settitle WinPT - The Windows Privacy Tray; a free GPG front-end for Windows
 Line 73 
 and copy it to the clipboard.
  Example: 1D75 8108 5BC9 D9FB E78B  2078 ED46 81C9 BF3D F9B4
+ It is a good idea to publish your fingerprint wherever possible.
+ For example via a business card or your website.
  @section Installation of the Program
  It is always recommend to use the latest version of the program. You
-Line 313 
 step directly after key generation, ther
+Line 316 
 step directly after key generation, ther
  default values. Just select a file name and enter the passphrase.
  The program issues a warning which should be read carefully.
- @subsection Adding a new secondary key
+ @subsection Adding a new Secondary Key
  For most users the existing keys in the key pair are enough
  and no extra key is needed. But there are some exceptions.
-Line 337 
 of taste. RSA and ElGamal are both capab
+Line 340 
 of taste. RSA and ElGamal are both capab
  users it's a good idea to let the program chose the key size (in bits).
  The default settings should be secure enough for most purposes.
- @subsection Adding a new user ID
+ @subsection Adding a new User ID
  If you got a new email account, it's propably a good idea to
  add these new account to your key also. For example:
-Line 353 
 comment: (optional)
+Line 356 
 comment: (optional)
  Now email programs are able to associate this address with your
  key when somebody wants to send you a protected mail to this account.
- @subsection Adding a photographic ID
+ @subsection Adding a new Photographic ID
  With this function you can add a photo to your public. It will be
  displayed in the key property dialog.
-Line 362 
 enter your passphrase and confirm with O
+Line 365 
 enter your passphrase and confirm with O
  in the dialog carefully to make sure the photo has a proper size
  (file, height and weight).
- @subsection Adding a new designated revoker
+ @subsection Adding a new Designated Revoker
  If you want to allow another key to revoke your own key, this
  might be useful if you lost your secret or a simliar situation,
  you can use this function to add a designated revoker to your key.
-Line 396 
 If the key is stored as an attachment, o
+Line 399 
 If the key is stored as an attachment, o
  a key from a file in general, just drag the file and drop it
  into the Key Manager window or use "Key" -> "Import...".
+ @subsection Sign a Public Key
+ If you verified that a key really belongs to its owner, you
+ should sign the key to integrate it into your Web of Trust
+ and also to mark the key as valid in your keyring. Do not sign
+ a key you just got via email with the request to sign it. Anybody
+ can create a key with your (or better ANY) name, these information
+ are no hint to whom the key really belongs. You can check a key
+ by meeting or calling the key owner and verify the key fingerprint
+ of the key with the one published by the key owner. Additional checks
+ should be to watch at his driver license or the identity card to make
+ sure that name of the key matches the name of the key owner. After
+ this procedure is done, you can open the Key Manager, select the
+ right key and either use the context menu "Sign Key" or use the
+ toolbar button.
+ The next dialog will summarize the key information and some
+ additional options. For example if the signature should be
+ local or exportable. Local means the signature will be stripped
+ if you export the key and no one else except you can use it to
+ calculate the validity. If you mark the signature exportable,
+ any other user can see and use it. Now you can select the key
+ you want to use to sign and enter the passphrase. Confirm with "OK"
+ and the key will be signed. Now the validity of the new key is
+ "Full". It is propably a good idea to set the ownertrust of the
+ key. For a detailled description, see the chapter "Key Ownertrust".
+ @subsection Key Ownertrust
+ First we should explain what the ownertrust of a key is. The ownertrust
+ is a measurement how much you trust somebody to certify and check keys
+ of other people. For example, if you know that Bob is really the owner
+ of the key, you should sign it. But he is also known to sign other keys
+ without checking the idenity of the other key owner. Values for the
+ ownertrust are 1) Don't Know 2) Don't Trust 3) Marginal 4) Full
+ and thus you should propably use an ownertrust value like "Marginal".
+ But this is a personal decision and stored in a separate file and
+ never exported with the public keys. For further information, please
+ take a look into the GNU Privacy Handbook.
+ Just a last work on Key Pairs, they are automatically marked as
+ "Ultimate" because the key belongs to you and you trust it implicit.
  @bye

 Legend:



Removed from v.226
 


changed lines


 
Added in v.227
 Legend:



Removed from v.226
 


changed lines


 
Added in v.227
-Removed from v.226
+Added in v.227

[email protected]	ViewVC Help
Powered by ViewVC 1.1.26