我刚刚从Ubuntu 网站。我在密钥服务器- 条目显示如下。
从 2018-03-25 开始，Matthew Knight 通过 Ghettoblow Slapahoe 签名是怎么回事？这是否意味着密钥的所有者签署了这些密钥 - 或者这是可伪造的？如果是这样，所有者为什么要这样做？
pub 4096R/C0B21F32 2012-05-11
Fingerprint=790B C727 7767 219C 42C8 6F93 3B4F E6AC C0B2 1F32
uid Ubuntu Archive Automatic Signing Key (2012) <[email protected]>
sig sig3 C0B21F32 2012-05-11 __________ __________ [selfsig]
sig sig 3F272F5B 2012-05-11 __________ __________ Ubuntu Archive Master Signing Key <[email protected]>
sig sig 7D86500B 2012-05-11 __________ __________ Colin Watson <[email protected]>
sig sig AB2A91F5 2012-05-11 __________ __________ James Troup <[email protected]>
sig sig 01AA4A64 2012-05-19 __________ __________ Steve Langasek <[email protected]>
sig sig 3CBDCCE0 2012-12-08 __________ __________ []
sig sig 1216648A 2014-10-31 __________ __________ Manfred Lichtenstern (DM8ANE) <[email protected]>
sig sig 46EB581F 2016-05-16 __________ __________ Stanislav Sidorenko (email&jabber) <[email protected]>
sig sig D3745C02 2018-03-25 __________ __________ Matthew Knight <[email protected]>
sig sig 7967B697 2018-03-26 __________ __________ Matthew Knight (mattknight) <[email protected]>
sig sig D23D923A 2018-04-21 __________ __________ Ghetto D. Whipitgood (Ghetto-D Sales & Slangin' Ho, Inc.) <[email protected]>
sig sig A4664187 2018-04-21 __________ __________ Pimp Tight MJG (Pimp Hard!) <[email protected]>
sig sig B7B66A8A 2018-04-21 __________ __________ Slim Shady (matt) <[email protected]>
sig sig B7B66A8A 2018-04-22 __________ __________ Slim Shady (matt) <[email protected]>
sig sig EB4F60BB 2018-04-23 __________ __________ Ghetto D. Whipitgood (Candy, Cream, or Rock... I Can Serve You On The Block.) <[email protected]>
sig sig 78CD7AAA 2018-04-25 __________ __________ Mihaardik Ifaapon Anpoonjab (mihaardik@mihaardik-minty-pc) <[email protected]>
sig sig E67A19F0 2018-04-25 __________ __________ Mihaardik Poonjab (midik@kocaine-mint-pc) <[email protected]>
sig sig FDCCABC5 2018-04-25 __________ __________ Ghetto D. Whipitgood (snowman) <[email protected]>
sig sig F3E8F3A1 2018-05-07 __________ __________ Ghettoblow Slapahoe (kocaine-kali-pc) <[email protected]>
答案1
哦，糟糕。我误解了密钥服务器输出的含义。这意味着好老 Ghettoblow Slapahoe 已经签署了[电子邮件保护]密钥，而不是相反。现在 G.Slapahoe 已经签署了，大家可以放心它是合法的了……
好奇没有更多像这样的垃圾邮件签名（也许它们被清除了？）。