Encrypted e-mail encouraged!

Please consider sending encrypted e-mails for all matters which you would send with an envelope by postal mail too!

I encourage the use of gpg/PGP encryption for e-mail communications. I recommend the use of GNU Privacy Guard; you will find tutorials in various languages, binaries and plug-ins for all operating systems and many e-mail programs.

My keys are available for download directly as well as from any OpenPGP keyserver, which might have some more recent signatures.

Please see below before signing any of my keys.

List of keys

• My signature key; this is used exclusively to sign my other keys. It does not expire on purpose - I take the security of it very carefully and protect it very well.

  NOTE: This is a signature only key on purpose. It cannot be used to send encrypted e-mail to me. Combined with the approach of using one key per role (personal and work, for example) the integrity of the web of trust is protected even in the theoretical case of being forced to reveal one of my encryption keys to a court of law - the breach of trust will be limitted to that role. As there cannot be any data encrypted with this signature key, there is no legal reason for a court to request that I reveal it to a court.

  This among other things implies that CA bot encryption challenges will not work! Please save us both the associated hassle. I really get annoyed by that.

  Download this key now

  pub  1024D/817C3568 2001-11-20 Lars Marowsky-Brée (lmb) 
                          <lars@marowsky-bree.de>
       Key fingerprint = CEC3 85E0 BC3E 1AC0 0A99  
                          0063 28C6 F56B 817C 3568
  

  Check this key in the global keyanalyze report and see whether I've made it into the top50 yet...

• This key is used for all private e-mail communications. If in doubt, use this key to contact me. I request that it is not used for work related communications. Download this key now

  pub  1024D/CD5707B1 2001-11-20 Lars Marowsky-Brée (lmb) 
                          <lars@marowsky-bree.de>
       Key fingerprint = 68FE 3144 83CB D986 B5E0  
                          613D 3925 C656 CD57 07B1
  sub  1024g/F98E0D8F 2001-11-20 [expires: 2004-11-19]
  

• Used for matters related to my job at SuSE. I request that it not be used for private communcations.

  Download this key now

  pub  1024D/05784B67 2001-11-20 Lars Marowsky-Brée 
                          <lmb@suse.de>
       Key fingerprint = 9897 103A 07C3 E939 890D  
                          7DF8 B9D7 F75D 0578 4B67
  sub  1024g/208ED90F 2001-11-20 [expires: 2004-11-19]
  

• Any other key with my name on it should have been revoked; so if you find one, please do not use it. Use only the keys above. Revocation certificates have been submitted to the key servers.

Signing policy

To increase the coverage of the web of trust, I frequently attend key signing parties. Please, feel free to contact me personally about swapping signatures, so the web of trust increases.

However, I will not sign random keys. All signatures made by me were only made after the identity of the key owner was verified. This should be standard for everyone.

If you want me to sign your key, please understand that I will only do so if I can identify you, and if I personally do not know you well enough, please do not be offended if I ask for personal id.

Similarly, please do not clutter my key with random signatures.

Please consider only signing my signature key 0x817C3568; your trust will then propagate to my keys used for e-mail communication. Please read the notice above about why CA Bots which try to send an encryption challenge are a nuisance.

Please help to keep the web of trust valid and meaningful!