使用PGP你的文章进行签名

security

浏览: 376425 次
来自: www.pgp.org.cn

最近访客更多访客>>

suncathay

feitianzi

zhqhqch

bnyt

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

Eclipse Weblogic AOP Web JSP

实在太多网站乱copy/paste，我们不得不采用数字签名来确保自己的文章确实出自自己的手笔。
介绍一个工具，它叫做PGP，下载地址(http://www.pgpi.org/products/pgp/versions/freeware/)
从即日起，本人将启用PGP对Blogjava文章和代码进行数字签名，如果大家需要验证签名,请先导入
我的身份证书(http://www.blogjava.net/Files/openssl/david.turing.rar),解压，然后Import到PGP中。

下面大致讲讲如何用PGP为文章签名：
1，生成Key，PGP默认生成的是DSS的Key
2，CurrentWindow->Sign，就可以对当前窗口的内容进行签名

3，签名前，PGP提示你输入PrivateKey的保护密码。

4，接着原来的文本会被新的签名替换
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ladies and Gents, Here's a dev2dev webinar you might want to attend
to find out BEA's direction with Eclipse
http://dev2dev.bea.com/trainingevents/webinars/ecliptools_040605.jsp
Here's the webinar's description "In February of 2005, BEA announced
a new change in strategy by joining the Eclipse Foundation as a Board
Member and Strategic Developer. BEA is leading the Web Tools Platform
(WTP) Project and has proposed a new Language Development Tools
Project. BEA has already begun to contribute to the Eclipse community
with the merging of AspectWerkz and AspectJ, demonstrating the
commitment to building in deep levels of support for Aspect-Oriented
Programming (AOP). With this, BEA will implement its WebLogic
Workshop 9.0 Product using the Eclipse tools framework. What does
this mean for BEA and for web tools in the future? Come hear BEA and
Eclipse experts talk about the direction that the industry is moving
and product roadmaps for what to expect next. Specific details to be
discussed include BEA’s relationship to open source and standards
organizations, BEA’s development model and strategy, and a special
preview roadmap of BEA’s work with Eclipse. " Take care Andreas

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBQi68CU2j31FcBpdPEQJfkgCgyjSJv51eSHOBsolN/C17QcxCuHUAn1Ch
qrss7LkUXAO4KrfLq+D9R9n8
=dRTi
-----END PGP SIGNATURE-----
5，验证签名同样简单
在点击左下角的PGPTray，CurrrentWindow-〉Decrypt&Verify,
PGP会自动搜索你的签名，并找对应的公钥来验证签名。如果验证正确，会提示
*** PGP Signature Status: good

总结：PGP很适合小群体(比如广州UserGroup)内使用，我们无须建立一个CA体系就能够建立简易的信任体系。