Index of /~gurski/keys/policies

Name	Last modified	Size

Parent Directory		-
0C4F9CBDD79C0A7B	2005-05-12 09:17	50
066B19DE6CDFFE49	2004-08-01 00:33	71
1DCEB5EEC0B4F04B	2003-05-05 23:18	4
1E4AF729D5CEFFD0	2004-08-01 00:14	71
2AE60BC20E4AB12F	2004-07-31 21:42	71
2E3A566F0722021E	2004-08-01 00:29	64
5BF481FD52A82435	2002-09-04 01:25	94
5CFD37FACC78C893	2004-08-01 00:38	71
5D2E7EA050116A47	2005-05-12 10:00	50
5E4526CE9992ADFC	2004-08-01 00:10	84
6D3FF2798836C97C	2004-08-01 00:06	84
24F8DFC26C7C4F5D	2005-05-11 20:46	89
28DEAE7F29982E5A	2004-07-31 20:41	71
35B7ADF976FB59D6	2002-09-04 23:01	94
46F8630EC34C240D	2004-07-31 21:22	71
58A8197E742D8186	2004-08-01 00:20	71
76E42504BB12DE0A	2002-09-04 01:20	14
80D9E91B03C88D4D	2002-09-04 23:03	94
88AA180509468BD5	2004-03-30 12:18	95
204C61150E606699	2005-05-11 17:56	89
21194EBB165733EA	2005-05-11 18:35	89
43222D22026A27F2	2003-05-05 23:15	94
228432B139B5BADD	2002-09-04 01:13	15
A945DA6ED8C75CF5	2002-09-04 01:39	94
ADC9E6061166213E	2002-09-04 01:19	4
C780FB079A3E9026	2004-08-01 00:55	71
CA78D1A35ADECAB1	2003-05-05 23:22	56
D2A0EC720E2CE409	2005-05-12 08:16	89
DB6F659A8B4CBC9C	2004-07-31 21:01	92
E0A0481F37D4B1CA	2002-09-04 01:34	94
EB5A896A28988BF5	2005-05-11 17:20	89
EC993D6365FDCDEE	2004-07-31 23:59	86
README.html	2010-06-22 12:24	4.0K
general_policy.html	2010-06-22 12:24	4.0K

Key Signature Policy

The OpenPGP standard defines several different types of signatures. This policy page concerns itself with the types of signatures on public keys, specifically types 0x10, 0x11, 0x12, and 0x13. (In GnuPG 1.0.7, these are represented as numbers from 0 to 3 on the signature. If the number is not shown, it is assumed to be 0.) This document will refer to these signatures as "trust levels", ranging from 0 to 3.

This document may, from time to time, be changed without notice. Should any trust criteria be changed in a manner that affects previously-signed keys, differences will be noted for the affected date ranges.

Trust Level	Policy
0	Any keys signed with a trust level of 0 before 2002-09-01 (September 1, 2002) were signed by me before support for trust levels was added to GnuPG. Any keys signed with a trust level of 0 on or after 2002-09-01 (September 1, 2002), have received very casual verification, not done in person (ie, strictly online acquaintances). Encrypted email to the uid(s) signed appears to reach the owner of the key.
1	Keys signed with a trust level of 1 indicate that I have done cursory verification of the person's identity, and either: I have seen a photo ID from an agency I trust to issue them reasonably. (So far, this includes only driver's licenses and US passports. I cannot state with certainty that all were valid licenses.) I have verified that the person appears to be the online persona associated with a particular nym/nickname/handle, through casual in-person conversation. I have also verified that the email address in the uid(s) signed works and appears to reach the person matching the criteria above.
2	Keys signed with a trust level of 2 indicate that I have personally, though casually, known the key owner for some time and reasonably believe them to be who they claim. I am almost certain that the email address on the uid(s) signed is a valid email address for the key owner.
3	Keys signed with a trust level of 3 indicate that I have personally known the key owner for quite some time, and genuinely believe them to be who they claim. I either routinely exchange email with them at the requested address, or know with a great degree of certainty that their email address is valid.

Individual justifications for signatures made after 2002-09-01 (September 1, 2002), can be found here.

Go back to my keys page.

Go back to my main page.

Join the Blue Ribbon Anti-Censorship Campaign!

Michael A. Gurski <(opt. [firstname].)[lastname]@pobox.com>