X-Git-Url: https://git.sthu.org/?a=blobdiff_plain;f=caff%2FREADME;h=e0333f71bd95c5a026eb35c7b8c820f6b30c7c76;hb=5aa8ef28a85d448e9f866a6dad021047a908c941;hp=d75022706269d88387cda3fa02438094cb8096bc;hpb=255a9ce126f63393e6d3e49d2141a31e9ac1ae1b;p=pgp-tools.git diff --git a/caff/README b/caff/README index d750227..e0333f7 100644 --- a/caff/README +++ b/caff/README @@ -1,4 +1,5 @@ caff -- CA - fire and forget +============================== caff is a script that helps you in keysigning. It takes a list of keyids on the command line, fetches them from a keyserver and calls @@ -8,37 +9,35 @@ mail, pruned from all but self sigs and sigs done by you. The mailed key is encrypted with itself as a means to verify that key belongs to the recipient. -Features: - * Easy to setup. - * Attaches only the very UID that we send to in the mail. - * Prunes the key from all signatures that are not self sigs and - not done by you, thereby greatly reducing the size of mails. - * Sends the mail encrypted if possible, will warn before sending - unencrypted mail (sign only keys) - * Creates proper PGP MIME messages. - * Uses separate GNUPGHOME for all its operations. - -Special Requirements: - * GnuPG 1.3.92 or later. - -Discussion: - Since we do not upload the new signatures, or import them into our main keyring, the signature only gets public if: - - the email address is valid + - the email address is valid, and - the person reading the email can decrypt the mail (if it was sent encrypted). - Therefore we achieve the same level of security as common Challenge -Repsonse systems like CABot, without all the extra hassle of those +Response systems like CABot, without all the extra hassle of those systems. +FEATURES +-------- + * Easy to setup. + * Attaches only the very UID that we send to in the mail. + * Prunes the key from all signatures that are not self sigs and + not done by you, thereby greatly reducing the size of mails. + * Sends the mail encrypted if possible, will warn before sending + unencrypted mail (sign only keys) + * Creates proper PGP MIME messages. + * Uses separate GNUPGHOME for all its operations. -Dependencies: gnupg (>= 1.3.92), perl, libgnupg-interface-perl, libtext-template-perl, libmime-perl, libmailtools-perl (>= 1.62), mailx +DEPENDENCIES +------------ + gnupg (>= 1.3.92), perl, libgnupg-interface-perl, + libtext-template-perl, libmime-perl, libmailtools-perl (>= 1.62) -INSTALLATION NOTES +INSTALLATION +------------ After creating a ~/.caffrc from the template, caff almost works out of the box.