From e49d1e69af7089d3c4a8769105a2286d2cf62edb Mon Sep 17 00:00:00 2001 From: Heiko Schaefer Date: Sat, 25 Nov 2023 15:57:00 +0100 Subject: [PATCH] clarify certification text And use Bob's real fingerprint. --- book/source/08-signing_components.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/book/source/08-signing_components.md b/book/source/08-signing_components.md index 25a4a6e..b275a9d 100644 --- a/book/source/08-signing_components.md +++ b/book/source/08-signing_components.md @@ -207,7 +207,7 @@ Third-party signatures in OpenPGP primarily encode authentication statements for When a signer issues a certifying signature on an identity, it indicates a verified link between the identity and the certificate. That is, the signer vouches for the connection. -For example, Alice can certify Bob's User ID `Bob Baker ` with his certificate `0xB0B`, by creating a certification signature that binds Bob's User ID and Bob's certificate. Bob can then distribute Alice's certifying signature as part of his certificate. +For example, Alice can vouch that Bob's User ID `Bob Baker ` is legitimately linked with his certificate `BB28 9FB7 A68D BFA8 C384 CCCD E205 8E02 D9C6 CD2F 3C7C 56AE 7FB5 3D97 1170 BA83`, by creating a certification signature. Bob can then distribute Alice's certifying signature as part of his certificate. Other users may or may not decide to rely on Alice's statement.