summaryrefslogtreecommitdiff
path: root/website/trust-models.mdwn
diff options
context:
space:
mode:
authorMicah Anderson <micah@riseup.net>2008-09-03 15:28:30 -0400
committerMicah Anderson <micah@riseup.net>2008-09-03 15:28:30 -0400
commit86f97d40d6fb60f7dde3c7e3a8aab0124f151d35 (patch)
tree94f62ff48a5ad9e4e65deec7b2fe606f2190555b /website/trust-models.mdwn
parent1e26301ec4cd2afc45c968c3fe3d77bf296b03fb (diff)
parent52d692d728d7d56ec0f17e0a9afbb6579a7eece9 (diff)
Merge commit 'dkg/master'
Diffstat (limited to 'website/trust-models.mdwn')
-rw-r--r--website/trust-models.mdwn21
1 files changed, 21 insertions, 0 deletions
diff --git a/website/trust-models.mdwn b/website/trust-models.mdwn
new file mode 100644
index 0000000..60aa680
--- /dev/null
+++ b/website/trust-models.mdwn
@@ -0,0 +1,21 @@
+[[meta title
+You can see your trust database parameters like this:
+
+ gpg --with-colons --list-key bogusgarbagehere 2>/dev/null | head -n1
+
+for me, it looks like this:
+
+ tru::1:1220401097:1220465006:3:1:5
+
+These colon-delimited records say (in order):
+
+ * `tru`: this is a trust database record
+ * `<empty>`: the trust database is not stale (might be 'o' for old, or 't' for "built with different trust model and not yet updated")
+ * `1`: uses new "PGP" trust model: this is just the old trust model plus trust signatures. I'll go into trust signatures later.
+ * `1220401097`: seconds since the epoch that i created the trust db.
+ * `1220465006`: seconds after the epoch that the trustdb will need to be rechecked (usually due to the closest pending expiration, etc)
+ * `3`: Either 3 certifications from keys with marginal ownertrust are needed for full User ID+Key validity
+ * `1`: Or 1 certification from a key with full ownertrust is needed for full User ID+Key validity
+ * `5`: max_cert_depth (not sure exactly how this is used)
+
+