mirror of
				https://github.com/ItsDrike/itsdrike.com.git
				synced 2025-11-04 04:06:36 +00:00 
			
		
		
		
	Mention -u option for key signing, fix formatting
This commit is contained in:
		
							parent
							
								
									5d4407b541
								
							
						
					
					
						commit
						863b170334
					
				
					 1 changed files with 18 additions and 13 deletions
				
			
		| 
						 | 
				
			
			@ -67,6 +67,7 @@ gpg --full-gen-key
 | 
			
		|||
```
 | 
			
		||||
 | 
			
		||||
This will ask a few questions, that will configure the key, most notably this will be:
 | 
			
		||||
 | 
			
		||||
- **Key type** - Which you will most likely want to keep at the default value (RSA and RSA)
 | 
			
		||||
- **Key size** - Where you should prefer the biggest possible size (probably 4096 bits), to make brute-force attacks
 | 
			
		||||
  really hard
 | 
			
		||||
| 
						 | 
				
			
			@ -81,7 +82,7 @@ This will ask a few questions, that will configure the key, most notably this wi
 | 
			
		|||
  files and got the key, it wouldn't be useful without the passphrase. But having to enter a passphrase each time can
 | 
			
		||||
  be annoying, ultimately you have to choose if you want convenience, or more security.
 | 
			
		||||
 | 
			
		||||
After this, GPG will generate the actual keys, containing the configuration you entered using *entropy*. Entropy
 | 
			
		||||
After this, GPG will generate the actual keys, containing the configuration you entered using _entropy_. Entropy
 | 
			
		||||
describes the amount of unpredictability that exists in your system. This is used to securely generate a random value
 | 
			
		||||
(the key), which couldn't easily be reconstructed (computers are generally bad at creating truly random values).
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			@ -179,6 +180,9 @@ gpg --sign-key [key-id]
 | 
			
		|||
 | 
			
		||||
Where, once again, `[key-id]` can be replaced by the received key's email address, or the ID.
 | 
			
		||||
 | 
			
		||||
Note: You can specify `--local-user [key-id]`/`-u [key-id]` to select which key to sign with, if you don't wish to use
 | 
			
		||||
your default key. You can also sign with multiple keys by chaining the option
 | 
			
		||||
 | 
			
		||||
After you've signed the key, you should help the key's issuer to take the advantage of your signing and send them that
 | 
			
		||||
signed version, so that when they're distributing their key to someone else, if that someone already has your key
 | 
			
		||||
imported and they trust you, they can find out that you've trusted this key in that it's information (name, email) is
 | 
			
		||||
| 
						 | 
				
			
			@ -373,6 +377,7 @@ messages to your friends.
 | 
			
		|||
 | 
			
		||||
However I wanted to talk a bit more about many different places where GPG is often used, and maybe where you can use
 | 
			
		||||
it:
 | 
			
		||||
 | 
			
		||||
- A very common use-case, which I've already mentioned a bit about is the use in package managers. This is because with
 | 
			
		||||
  package managers, it's hard for the owners of these to set up world-wide mirror servers across the entire world and
 | 
			
		||||
  maintain each and every one of them, so instead, they rely on other people to set their own mirrors and make them
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue