SANOG IV
23-30 July, 2004 Kathmandu, Nepal

PGP Mini Tutorial Agenda

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

(Scroll down past the "introduction" section to find out specific
information about the key signing party in Kathmandu).

INTRODUCTION

We will hold a PGP Key Signing Party at SANOG IV, in Kathmandu. The
current plan is to do it on 28 July, but keep an eye on the SANOG
programme, in case it changes:

http://www.sanog.org/sanog4/program.htm

PGP ("Pretty Good Privacy") is a way to make digital signatures (so you
can be sure that something hasn't been changed by a third party) and
encrypt data (so you cn be sure that something hasn't been viewed by a
third party). You'll find lots of information on PGP on the web, at
places like these:

http://www.openpgp.org/
http://www.gnupg.org/
http://www.pgpi.org/

There will be a brief PGP tutorial given before the key signing party.
However, if you want to participate, there are some things you need to
do first.

BEFORE THE KEY SIGNING PARTY

1. If you don't already have PGP software installed, find some (e.g.
use the links above) and install it.

2. If you don't already have a PGP key, use your PGP software to create
one.

3. Export your public key (or keys, if you have more than one for some
reason) in an ASCII format which begins with the text "-----BEGIN PGP
PUBLIC KEY BLOCK-----". Consult your software's documentation for
instructions; the following might be helpful if you're using unix:

PGP 2.6.2: pgp -kxa my-email-address mykey.asc
PGP 5.x: pgpk -xa my-email-address >mykey.asc
GnuPG: gpg -a --export my-email-address >mykey.asc

4. Add your public key to the SANOG 4 keyring by pasting it (or
uploading it) into this web form:

http://www.biglumber.com/x/web?keyring=3848

If you have trouble with this, feel free to send me mail attaching your
public key, and I'll take care of it for you. You can also view the
other keys that are already on that keyring using that URL.

AT THE KEY SIGNING PARTY

1. Bring a trusted copy of your PGP key fingerprint with you (or bring
a laptop that you can generate one with, from a trusted copy of your
public key). You will use this to ensure that everybody else at the
party has an authentic copy of your key.

2. Bring some photo ID with you (e.g. passport, government identity
card, driver's licence, etc). You will use this to persuade people at
the party who don't know you that you really are who you say you are.

3. Show up on time! Everybody needs to be in the room at the same time
for this to work usefully. If you're late, you'll miss out.

Further details of exactly how the keys are checked and how signatures
are added will be covered in the mini-tutorial; any other questions
should be directed at me (send me mail!).

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFA9Zj2/f+PWOTbRPIRAoIeAKC/od4a3ptGg62cSirSxEgxWZFANgCff5B0
DS+lPKFgSBsFc2wURh9co6s=
=tihV
-----END PGP SIGNATURE-----