實(shí)在太多網(wǎng)站亂copy/paste,我們不得不采用數(shù)字簽名來確保自己的文章確實(shí)出自自己的手筆。
介紹一個(gè)工具,它叫做PGP,下載地址(http://www.pgpi.org/products/pgp/versions/freeware/)
從即日起,本人將啟用PGP對(duì)Blogjava文章和代碼進(jìn)行數(shù)字簽名,如果大家需要驗(yàn)證簽名,請(qǐng)先導(dǎo)入
我的身份證書(http://www.tkk7.com/Files/openssl/david.turing.rar),解壓,然后Import到PGP中。
下面大致講講如何用PGP為文章簽名:
1,生成Key,PGP默認(rèn)生成的是DSS的Key
2,CurrentWindow->Sign,就可以對(duì)當(dāng)前窗口的內(nèi)容進(jìn)行簽名

3,簽名前,PGP提示你輸入PrivateKey的保護(hù)密碼。

4,接著原來的文本會(huì)被新的簽名替換
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ladies and Gents, Here's a dev2dev webinar you might want to attend
to find out BEA's direction with Eclipse
http://dev2dev.bea.com/trainingevents/webinars/ecliptools_040605.jsp
Here's the webinar's description "In February of 2005, BEA announced
a new change in strategy by joining the Eclipse Foundation as a Board
Member and Strategic Developer. BEA is leading the Web Tools Platform
(WTP) Project and has proposed a new Language Development Tools
Project. BEA has already begun to contribute to the Eclipse community
with the merging of AspectWerkz and AspectJ, demonstrating the
commitment to building in deep levels of support for Aspect-Oriented
Programming (AOP). With this, BEA will implement its WebLogic
Workshop 9.0 Product using the Eclipse tools framework. What does
this mean for BEA and for web tools in the future? Come hear BEA and
Eclipse experts talk about the direction that the industry is moving
and product roadmaps for what to expect next. Specific details to be
discussed include BEA’s relationship to open source and standards
organizations, BEA’s development model and strategy, and a special
preview roadmap of BEA’s work with Eclipse. " Take care Andreas
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
iQA/AwUBQi68CU2j31FcBpdPEQJfkgCgyjSJv51eSHOBsolN/C17QcxCuHUAn1Ch
qrss7LkUXAO4KrfLq+D9R9n8
=dRTi
-----END PGP SIGNATURE-----
5,驗(yàn)證簽名同樣簡單
在點(diǎn)擊左下角的PGPTray,CurrrentWindow-〉Decrypt&Verify,
PGP會(huì)自動(dòng)搜索你的簽名,并找對(duì)應(yīng)的公鑰來驗(yàn)證簽名。如果驗(yàn)證正確,會(huì)提示
*** PGP Signature Status: good

總結(jié):PGP很適合小群體(比如廣州UserGroup)內(nèi)使用,我們無須建立一個(gè)CA體系就能夠建立簡易的信任體系。