more documentation

[pgp-tools.git] / caff / README.many-keys

diff --git a/caff/README.many-keys b/caff/README.many-keys
new file mode 100644 (file)
index 0000000..ce57d5e
--- /dev/null
+++ b/caff/README.many-keys
@@ -0,0 +1,43 @@
+Using caff to sign lots of keys
+-------------------------------
+
+If you have loads of keys to sign (sometimes, there are keysigning parties with
+more than 100 participants), keysigning can be arkward, even with caff. It gets
+worse if you have multiple local keys and want to sign with all.
+
+Some hints to get the signing done faster:
+
+* Use fingerprints instead of key ids.
+
+  caff and gpg allow you to specify the full fingerprint. This will save you
+  from having to check the fingerprint yourself. If you have a text file with
+  all fingerprints, use that and then run
+
+  $ caff <options> `cat ksp-fingerprints.txt`
+
+* v3 keys are evil.
+
+  Sign v3 separately. Batch processing does not work. See README.v3-keys.
+
+* Use multiple passes.
+
+  Going through retrieving, signing, and mailing keys can help, e.g.:
+
+  $ caff -SEM `cat ksp-fingerprints.txt`
+  $ caff -REM `cat ksp-fingerprints.txt`
+  $ caff -RSE `cat ksp-fingerprints.txt`
+
+* If you have multiple local keys, only send mail once after signing with all.
+
+  caff will send out all previously done signatures in the message. (Of course
+  you have to configure $CONFIG{'keyid'} to contain all your key ids.)
+
+  $ caff -EM -u <mykey1> <other_key>
+  $ caff -RE -u <mykey2> <other_key>
+
+* Use gpg-agent.
+
+  See README.gpg-agent.
+
+ -- Christoph Berg <cb@df7cb.de>  Sat,  2 Jul 2005 21:22:07 +0200
+