Re: About PGP Signing a File.



Matthew Flaschen wrote:
Joel Bryan Juliano wrote:
Hi,

I have a question regarding signing a file or binary, I installed
Seahorse which is really awesome tool! And it has a nautilus-extension
that easily Encrypt and Sign a file or directory by right-clicking the
file. Can someone please tell me the use of signing a binary file or
directory? I know it's important, but I really don't get it.

There's no use, unless you're planning on sending the file to someone.
If you do send it to someone, they can check the signature to verify you
sent it. Emails and most forms of electronic communication can be
easily forged, but signatures can't be.

Verifying the signature also confirms that the file has not been
modified since you signed it but some malicious person. So it acts a bit
like an MD5 checksum with the added benefit that you can check who
signed it.

Regards,
Tony.
--
Tony Arnold, IT Security Coordinator, University of Manchester,
IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL.
T: +44 (0)161 275 6093, F: +44 (0)870 136 1004, M: +44 (0)773 330 0039
E: tony.arnold@xxxxxxxxxxxxxxxx, H: http://www.man.ac.uk/Tony.Arnold

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Relevant Pages

  • Re: About PGP Signing a File.
    ... I have a question regarding signing a file or binary, ... If you do send it to someone, they can check the signature to verify you ... You need to import his public key from a key server somewhere and add it ... IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL. ...
    (Ubuntu)
  • Re: About PGP Signing a File.
    ... I have a question regarding signing a file or binary, ... If you do send it to someone, they can check the signature to verify you ... Emails and most forms of electronic communication can be ... IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL. ...
    (Ubuntu)
  • Re: About PGP Signing a File.
    ... I have a question regarding signing a file or binary, ... If you do send it to someone, they can check the signature to verify you ... Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org ...
    (Ubuntu)
  • Re: mailing list pgp signatures...
    ... But g's attitude doesn't make me fond of signing, ... private key, unless he posted the private key as well. ... you know is that the message has a signature that you can not verify. ...
    (Fedora)
  • Signature verification fails with data!
    ... I am signing a small chunk of data using Signature sign method. ... It results in a "true" if I dont provide message data and provide only PublikKey and signature. ... According to my knowledge and reading on the internet it should take data as input too, to verify. ... Signing Code ...
    (comp.lang.java.security)