You are viewing a plain text version of this content. The canonical link for it is here.
Posted to community@apache.org by Rich Bowen <rb...@rcbowen.com> on 2003/02/14 17:53:37 UTC
The web of trust
I went to a keysigning last night, and started playing with some
software for graphing the web of trust. I have generated some images
that are kinda cool, and you can see them at http://apacheadmin.com/gpg/
I generated this using graphviz
(http://www.research.att.com/sw/tools/graphviz/) and sig2dot.pl
(http://www.chaosreigns.com/code/sig2dot/)
The procedure for generating one of these from your keyring is:
gpg --list-sigs | ./sig2dot.pl > keyring.dot
neato -Tps keyring.dot > keyring.ps
convert keyring.ps keyring.jpg
convert -size 100x200 keyring.jpg keyring_thumb.jpg
A couple notes, should you try this at home.
1) I could not figure out how to get it to just run from a particular
keyring, and so I actually moved my real keyring to a backup, and
replaced it with the one I wanted to work with. There's probably another
way to do this.
2) If there are more than 100 or so keys on a ring, this takes an
enormous amount of time and memory. I tried to generate one for my
entire keyring, and gave up after an hour.
3) I have wasted the entire morning doing this. Be warned that, if
you're into this kind of thing, you may not get anything done for the
rest of the day. So, at least somebody tell me that this is the coolest
thing you have seen today, so that I don't feel like I have completely
watest my time. ;-)
4) No, I don't know what the colors mean. I know that I saw it explained
somewhere, but I don't remember where, or what the explanation was.
--
Rich Bowen - rbowen@rcbowen.com
http://kenya.rcbowen.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Lars Eilebrecht <la...@hyperreal.org>.
According to Rich Bowen:
> 3) I have wasted the entire morning doing this. Be warned that, if
> you're into this kind of thing, you may not get anything done for the
> rest of the day. So, at least somebody tell me that this is the coolest
> thing you have seen today, so that I don't feel like I have completely
> watest my time. ;-)
Cool! :-)
ciao...
--
Lars Eilebrecht - Programmers do it bit by bit.
lars@hyperreal.org
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Rich Bowen <rb...@rcbowen.com>.
On Fri, 14 Feb 2003, Ben Laurie wrote:
> This is kinda cool, I wonder if you updated the sigs from the keyservers
> or just used KEYS files? I ask coz I suspect the KEYS files have not
> been properly updated since ApacheCon, where much signing was done.
I actually updated from several key servers. More than 1000 signatures
on them that are not in the KEYS file. Not that they really need to be,
I guess.
--
Who can say where the road goes
Where the day flows
Only time
--Pilgrim (Enya - A Day Without Rain)
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Ben Laurie <be...@algroup.co.uk>.
Rich Bowen wrote:
> I went to a keysigning last night, and started playing with some
> software for graphing the web of trust. I have generated some images
> that are kinda cool, and you can see them at http://apacheadmin.com/gpg/
>
> I generated this using graphviz
> (http://www.research.att.com/sw/tools/graphviz/) and sig2dot.pl
> (http://www.chaosreigns.com/code/sig2dot/)
>
> The procedure for generating one of these from your keyring is:
>
> gpg --list-sigs | ./sig2dot.pl > keyring.dot
> neato -Tps keyring.dot > keyring.ps
> convert keyring.ps keyring.jpg
> convert -size 100x200 keyring.jpg keyring_thumb.jpg
>
> A couple notes, should you try this at home.
>
> 1) I could not figure out how to get it to just run from a particular
> keyring, and so I actually moved my real keyring to a backup, and
> replaced it with the one I wanted to work with. There's probably another
> way to do this.
>
> 2) If there are more than 100 or so keys on a ring, this takes an
> enormous amount of time and memory. I tried to generate one for my
> entire keyring, and gave up after an hour.
>
> 3) I have wasted the entire morning doing this. Be warned that, if
> you're into this kind of thing, you may not get anything done for the
> rest of the day. So, at least somebody tell me that this is the coolest
> thing you have seen today, so that I don't feel like I have completely
> watest my time. ;-)
>
> 4) No, I don't know what the colors mean. I know that I saw it explained
> somewhere, but I don't remember where, or what the explanation was.
This is kinda cool, I wonder if you updated the sigs from the keyservers
or just used KEYS files? I ask coz I suspect the KEYS files have not
been properly updated since ApacheCon, where much signing was done.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html http://www.thebunker.net/
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Rich Bowen <rb...@rcbowen.com>.
On Sun, 16 Feb 2003, Stefano Mazzocchi wrote:
> Rodent of Unusual Size wrote:
> > as i blogged, i'd love to see this feedable into agora..
>
> agora's file format is *very* simple. example:
>
> 3
> me
> you
> somebody
> 1|2|2
> 2|3|1
> 3|1|1
>
> first line is the number of nodes (n)
> follows the names of the nodes (n lines)
> follows any number of links where x|y|z says that
> x node links to y node with intensity z
>
> current limitation is that intensity must be an integer number (I want
> it to be a float in the future)
>
> So, if you come up with the above, agora can visualize it right away.
I'll see if I can come up with something like this. I might have some
spare time around here somewhere.
--
Nothing is perfekt. Certainly not me.
Success to failure. Just a matter of degrees.
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Stefano Mazzocchi <st...@apache.org>.
Rodent of Unusual Size wrote:
> as i blogged, i'd love to see this feedable into agora..
agora's file format is *very* simple. example:
3
me
you
somebody
1|2|2
2|3|1
3|1|1
first line is the number of nodes (n)
follows the names of the nodes (n lines)
follows any number of links where x|y|z says that
x node links to y node with intensity z
current limitation is that intensity must be an integer number (I want
it to be a float in the future)
So, if you come up with the above, agora can visualize it right away.
--
Stefano Mazzocchi <st...@apache.org>
Pluralitas non est ponenda sine necessitate [William of Ockham]
--------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Rodent of Unusual Size <Ke...@Golux.Com>.
as i blogged, i'd love to see this feedable into agora..
--
#ken P-)}
Ken Coar, Sanagendamgagwedweinini http://Golux.Com/coar/
Author, developer, opinionist http://Apache-Server.Com/
"Millennium hand and shrimp!"
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org
Re: The web of trust
Posted by Dirk-Willem van Gulik <di...@webweaving.org>.
On Fri, 14 Feb 2003, Rich Bowen wrote:
> that are kinda cool, and you can see them at http://apacheadmin.com/gpg/
Very cool !
Dw
---------------------------------------------------------------------
To unsubscribe, e-mail: community-unsubscribe@apache.org
For additional commands, e-mail: community-help@apache.org