0
Cicadas & Security, Part 2: When a Verified PGP Key Takes You on a Trip to the Desert
Toni Noble, 2017. Threat Stack blog, 19 April 2017.
A security engineer's walk-through of verifying Cicada's signatures. Quotes the first signed message of January 2012, "From here on out, we will cryptographically sign all messages with this key", gives the key's full fingerprint and explains why the short key ID alone can be faked.
What it's used for here
Source for Cicada's commitment to sign every message and for the verification procedure.
Cited by on this site 4 records
Cite it
Noble, T. (2017). Cicadas & Security, Part 2: When a Verified PGP Key Takes You on a Trip to the Desert. Threat Stack blog, 19 April 2017. https://blog.threatstack.com/cicadas-security-part-2-when-a-verified-pgp-key-takes-you-on-a-trip-to-the-desert
@misc{noble2017threatstack,
author = {Noble, Toni},
title = {Cicadas \& Security, Part 2: When a Verified PGP Key Takes You on a Trip to the Desert},
howpublished = {Threat Stack blog, 19 April 2017},
year = {2017},
url = {https://blog.threatstack.com/cicadas-security-part-2-when-a-verified-pgp-key-takes-you-on-a-trip-to-the-desert}
}TY - ELEC TI - Cicadas & Security, Part 2: When a Verified PGP Key Takes You on a Trip to the Desert AU - Noble, Toni PY - 2017 JO - Threat Stack blog, 19 April 2017 UR - https://blog.threatstack.com/cicadas-security-part-2-when-a-verified-pgp-key-takes-you-on-a-trip-to-the-desert ER -
Noble, Toni. “Cicadas & Security, Part 2: When a Verified PGP Key Takes You on a Trip to the Desert.” Threat Stack blog, 19 April 2017 (2017).