PGP Keysigning Policy


My Key Information

pub   4096R/049D2671  created 2015-12-10  expires 2020-12-08          
  fingerprint  8B79 EE0C 2D22 FE87 151D  5D1B CC61 F722 049D 2671
uid   Michael Mosburger <michael(at)mosburger[dot]eu>
uid   Michael 'Mose' Mosburger <mose(at)fabmail[dot]org>
		

Key Signing

I am willing to sign keys at keysigning parties, conferences or upon request if we meet in person.
Please, do not email me requesting that I sign a key if we do not already know each other.

Key Types

I am willing to sign the following types of keys:

0x10 0x11 0x12 0x13
Personal keys O X X X
Corporate keys O X X
Group/Shared keys O X X
Pseudonymous keys O X

Signing Requirements

My requirements per signature type (described in RFC4880) are as follows:

0x10: Generic certification

Normally I do not issue this level.

0x11: Persona certification

0x12: Casual certification

0x13: Positive certification

Signing Procedure

I will meet with another user in reasonable conditions and verify his or her identity against a government-issued photo ID. I will also accept a passport from any country or a european driver license. The user must present me with a written or printed record of the key fingerprint and list of the UIDs to be signed. It will be greatly appreciated if this piece of paper leaves some room for notes.

I will send the signed key to the keyholder only; the keyholder can distribute these as he or she sees fit. My signature for each UID will be delivered to that UID only, so my signature on e.g. an email address confirms that the key owner has access to that email address. I will sign UIDs containing photos, XMPP addresses, etc. at my discretion. If the UIDs I signed contain contact information, each signature will be sent to the corresponding address, encrypted if possible. If some UIDs do not specify contact information, the signature for these UIDs will be sent to the address on one of the other signed UIDs. If none of the UIDs to be signed give contact information then the keyholder must specify during our meeting where the signatures should be sent.


Version History

2016-05-19
Revoked UID mose(at)fabfolk[dot]com; Added UID mose(at)fabmail[dot]org
2015-12-15
Updated signing requirements to better reflect RFC4880
2015-12-13
Initial upload to <http://pgp.mosburger.eu/>