gistfile1.md

Signing SCALE 11 stuff notes

Sending your signature

Install gpg from wherever. OS X: brew install gpg

Download the keyring from the email to ~/Desktop/

cd ~/Desktop && wget http://www.phildev.net/scale/scale11x-keyring.gpg

Configure iTerm 2's Triggers or whatever mechanism to highlight valid keys as a different color. I dervied this regex from the list of keys on my paper:

http://i.imgur.com/fRkzE2h.png

(11670743|9887C3AA|8086060F|FF02EE69|BD0EEB0D|5BF8E747|6D263974|7AE3FCAD|720E900A|6EF31CD1|35EA205E|B54F6E5D|03358B34|A41978AD|7AC0A593|0E90FCD5|D5B2F0FB|1A1ABC84|39C25CF7|0B69463D|526A2D5A|69681BC4|B95703F8|A92C8FB4|D50689C5|6300CC3D|5335320A|792E6EA7|53284DEA|AC855F84|66BFAD87|5AD6F274|203EABFA|FD34E627|0426E2A2|1D0AD623|59763814|57E965B5|A582E526|ADCF551F|45B9D20A|92889803|68D51AF4|14725EC8|A1E732BB|83842826|774FC477|88DBFD17|ABBEA6FF|114140F9|D04B9C1E|04D29EBA|120330BC|4D7DB39B|56C823EE|DC3FA1F5)

clone berto's pius fork because we're too lazy to set mail servers ourselves.

git clone https://github.com/rca/pius

cd into it and run

./pius -b `which gpg` -g <yourgoogleaacct@gmail.com>  -A -I -r ~/Desktop/scale11x-keyring.gpg -s <your key id>

You will need your GPG passphrase and your Google account password for the prompt. If you are using two factor authentication (you should be), get a unique password here.

Any key that's highlighted is on the paper so answer 3 for maximum trust level sicne that was Phil's criteria. If the keyid isn't highlighted, press N or enter and skip it. You have to press enter for every id on a key. You should see , mailed for each id/email.

Recieving signatures of your key

Install Thunderbird and the Enigmail addon. Setup gmail into your Thunderbird. Make sure Enigmail is setup for your account.

For every email that comes in regarding keys and is from pius, context-click the attachment and select Import OpenPGP Key. If this is done right, then you'll get a message saying new signatures were added to your key. Every once in a while you'll have to type in your passphrase especially if you've walked away from Thunderbird for more than five minutes.

After every session of importing keys in Thunderbird, run gpg --send-keys --keyserver=pgp.mit.edu <your key id>. It'll send the signatures that the other partygoers have sent you alongside your key.

Sometimes the message decrypts but the signature block does not get recognized as an attachment by Thunderbird. For these, you'll have to copy the PGP block out to your clipboard, paste into gpg --import, and presss CTRL-D for EOF.

Or like that doug guy, you'll just have to play along. Thunderbird can send PGP encrypted email just fine too FYI.

Once in a while you'll have some stragglers send you signatures in a different scheme. Bear with it and import.