GPG Signing Policy of Elena Grandi ================================== 2012-02-16 This is the signing policy for key 0x01809E2A:: pub 4096R/01809E2A 2011-10-06 Key fingerprint = 0506 CD00 A2F9 DE57 E498 F628 D599 FF61 0180 9E2A uid Elena Grandi (``of Valhalla'') uid Elena ``of Valhalla'' sub 4096R/0411EB6E 2011-10-06 sub 4096R/CEC12296 2011-10-06 [expires: 2013-10-05] Meeting ^^^^^^^ I am willing to sign keys for people I meet in person, for example at a conference or a LUG/FSUG meeting, in reasonable circustances (not in a hurry, in a calm place, etc.). The owner of the key should bring an hardcopy of the output of the command:: gpg --fingerprint $KEY_ID or an equivalent listing of the same informations. If the key is not available on public servers, the piece of paper should include an alternative address where I can easily retrieve the public key to sign. Signature Levels ^^^^^^^^^^^^^^^^ * 0x10 I've used this level for some earlier signatures. From now on it will be used for keys that belong to organizations instead of real persons. * 0x11 Not used. * 0x12 I have checked a government issued photo ID, possibly at a keysigning party. * 0x13 I have known the owner of the key for at least a few months and checked the name on a government issued photo ID. Key trasport ^^^^^^^^^^^^ After I've signed the UIDs, I will send the signed and possibly encrypted key back to each email address, as a light form of address ownership check; I will not upload the key to any keyserver. Subsequent keys ^^^^^^^^^^^^^^^ If I have signed your key and it is set to expire in the near future or you want to add a new key, I am willing to sign it without meeting in person as long as the following conditions are met. * The old key is not yet expired nor revoked when you send me the request (of course). * You send me an email signed with the old key and including the informations on the new key as needed for a new signature (fingerprint, UID you want to have signed, informations for key retrieval). I will then sign the UIDs I had already signed on the old key; other UIDs may be signed or not at my discretion. Pseudonym keys ^^^^^^^^^^^^^^ I will only sign pseudonym identities on keys if I've known the owner of the key under that pseudonym for more than a year.