caff/README

   1 caff  --  CA - fire and forget
   2
   3 caff is a script that helps you in keysigning.  It takes a list of
   4 keyids on the command line, fetches them from a keyserver and calls
   5 GnuPG so that you can sign it.  It then mails each key to all its
   6 email addresses - only including the one UID that we send to in each
   7 mail, pruned from all but self sigs and sigs done by you.  The mailed
   8 key is encrypted with itself as a means to verify that key belongs to
   9 the recipient.
  10
  11 Features:
  12  * Easy to setup.
  13  * Attaches only the very UID that we send to in the mail.
  14  * Prunes the key from all signatures that are not self sigs and
  15    not done by you, thereby greatly reducing the size of mails.
  16  * Sends the mail encrypted if possible, will warn before sending
  17    unencrypted mail (sign only keys)
  18  * Creates proper PGP MIME messages.
  19  * Uses separate GNUPGHOME for all its operations.
  20
  21 Special Requirements:
  22  * GnuPG 1.3.92 or later.
  23
  24 Discussion:
  25
  26 Since we do not upload the new signatures, or import them into our
  27 main keyring, the signature only gets public if:
  28  - the email address is valid
  29  - the person reading the email can decrypt the mail (if it was sent
  30    encrypted).
  31
  32 Therefore we achieve the same level of security as common Challenge
  33 Repsonse systems like CABot, without all the extra hassle of those
  34 systems.
  35
  36
  37
  38 Dependencies: gnupg (>= 1.3.92), perl, libgnupg-interface-perl, libtext-template-perl, libmime-perl, libmailtools-perl (>= 1.62), mailx
  39
  40
  41 INSTALLATION NOTES
  42
  43 After creating a ~/.caffrc from the template, caff almost works out of the box.
  44
  45 --
  46 Peter
  47 $Id$