Keysigning
|
|
Keysigning refers to digitally signing someone else's public key using your own.
A more correct term would be certificate signing, since the actual key material is not changed by the process of signing. However, in the PGP community it is customary not to distinguish in speaking between someone's key and certificate, and the term keysigning is used. (The term PGP refers here to all implementations of the OpenPGP standard, such as GnuPG.)
Users of PGP sign one another's keys to indicate to any third party that the signer trusts the signee. This enables someone who trusts the signer to extend his trust to the signee as well. In this way, a web of trust is built.
PGP users often organize keysigning parties, where many people meet in person to verify each other's identity using some printed certificate of identity and then sign each other's keys.
External links
GPG Keysigning Party HOWTO (http://www.cryptnet.net/fdp/crypto/gpg-party.html)