Tool for authentication of Usenet control messages.
Original source: https://ftp.isc.org/pub/pgpcontrol/ and https://git.eyrie.org/?p=usenet/pgpcontrol.git
2034f9bc74
! efn, eug userid + nz + si + un |
||
---|---|---|
PGPKEYS | ||
pgpverify | ||
README.html | ||
signcontrol |
<HTML><!-- -*- sgml -*- --> <HEAD> <TITLE>Authentication of Usenet Group Changes</TITLE> <LINK REV="made" HREF="mailto:tale@isc.org"> </HEAD> <BODY> <H1>Authentication of Usenet Group Changes</H1> <P>This document addresses a method for the authentication of the special types of Usenet articles that are used to maintain the namespace of Usenet groups. A basic familiarity with what the Usenet control message types "newgroup", "rmgroup" and "checkgroups" do is assumed; this is not a tutorial in namespace administration.</P> <P>Usenet articles are notoriously easy to forge, and control messages are no exception. Since administrators often want to have their news systems automatically honor requests from some particular people to add or remove newsgroups, it is risky to trust the From: and Sender: headers to identify the real sender of a message, as has historically been done. Thus a system using Philip Zimmerman's <A HREF="#Getting PGP">Pretty Good Privacy</A>® (PGP® ) was developed to provide a more secure means of authenticating the sender of a control message.</P> <P>Unlike traditional PGP authentication of messages, which just verifies that the contents of the body of a message are unchanged from when it was digitally "signed", this system also needed to sign a few headers of the control message to verify the action to be taken and to guard against certain other pitfalls. Another goal was to make the signature as unobtrusive as possible and require minimal changes to existing software in order to work.</P> <H2>How to Verify Control Messages</H2> <P>Listed below are the steps you need to take to enable PGP authentication of control messages on your system.</P> <P>Here is the short and simple version for someone who feels confident hacking around the news system and doesn't like to read a lot:</P> <OL> <LI>Get and configure the software: <UL> <LI> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/pgpverify"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/pgpverify</A> <LI> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/</A> </UL> <LI>Add <A HREF="#Keys">maintainers' PGP public keys</A> to the news system key ring. <LI>Enable verification through the news system authorization system. <DL> <DT>INN: <DD>Use the action <B>verify-<I>pgp_userid</I></B> (possibly appended <B>=<I>logfile</I></B>) in <I>control.ctl</I>. <DT>C News: <DD>Use the action <B>p</B> in the fourth field of <I>controlperm</I>. <DT>Other systems: <DD>Sorry, not implemented yet. </DL> <LI>Test <I>pgpverify</I>. If you have the news.announce.newgroups key in your key ring, run <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/sample.control"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/sample.control</A> through <I>pgpverify</I> on stdin. It should spit out the string "news.announce.newgroups" on stdout. </OL> <P>Here is a more verbose version of the instructions:</P> <P> <OL> <LI> Get the software. <P>There are two pieces of code that will need to be added to a news server to make use of this authentication system: a stand-alone script that verifies an article is what it says it is, and a patch to hook it into the news server's processing of control messages.</P> <P>The stand-alone program, <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/pgpverify"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/pgpverify</A>, is a <A HREF="#Getting Perl">Perl</A> script that should work with Perl version 4 and up. (I have not tested it with earlier versions.) It does not contain any code making it dependent on any particular news server software.</P> <P> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/</A> has patches for hooking the system into existing news server software. Choose the one for your system from the list below.</P> <UL> <LI> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/inn1.4sec/pgpcontrol.pch"> INN version 1.4sec</A> <LI> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/inn1.4unoff4/pgpcontrol.pch"> INN version 1.4unoff4</A> <LI> <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/server-patches/cnews-CR.G/pgpcontrol.pch"> C News version CR.G</A> (Courtesy of System Administrator <root@hp9000.laafb.af.mil> and Charles Lindsey <chl@clw.cs.man.ac.uk>) </UL> <P>I regret that I do not have the time to develop more patches, but I will gladly add patches for other systems to this page as they are made available to me. The INN version 1.4sec patch will apply to all INN "unoff" versions, albeit with a little bit of fuzz. I am not positive what versions of C News will work with the C News CR.G patch; if you try it with other versions, please let me know how it goes.</P> <LI> Install it in your news system. <P>First you must ensure that the absolute paths to <I>perl</I> and to <I>pgp</I> are correct in the first few lines of the <I>pgpverify</I> program. No other configuration of options or pathnames should be needed.</P> <P>Next, the following steps assume, solely for the sake of making it easy for me to write a simple recipe, that you have copied <I>pgpverify</I> and the patch for your system to your news server as <I>/tmp/pgpverify</I> and <I>/tmp/pgpcontrol.pch</I> respectively. I have tried to format this so that you should be able to cut and paste any of the lines in italics directly to your shell.</P> <P> <UL> <LI>If you are running INN: <PRE> cd to the executable program directory that has <I>ctlinnd</I>. <I>mv /tmp/pgpverify pgpverify</I> cd to the root of your INN source tree. <I>cd site</I> <I>patch < /tmp/pgpcontrol.pch</I> <I>make install</I> </PRE> <P>It has been reported to me that at least one AIX system has problems with <I>patch</I> not applying the last section of <I>parsecontrol.pch</I>. If you run AIX, double check it and apply by manually editing, if necessary.</P> <LI>If you are running C News: <PRE> cd to the C News program directory that has <I>spacefor</I>. <I>mv /tmp/pgpverify pgpverify</I> cd to the root of your C News source tree. <I>cd ctl</I> <I>patch < /tmp/pgpcontrol.pch</I> <I>make install</I> </PRE> <LI>If you are running some other system: <P>You're out of luck until someone writes a patch and instructions for your system and makes it available to me for redistribution.</P> </UL> <LI> Enable verification for the hierarchies that interest you. <P>To verify messages, you must have a <A HREF="#Keys">PGP public key for each signer</A> that you wish to trust. It should be entered in a key ring that is accessible to the user-id that runs the news system by running <I>pgp -ka</I> on a file containing the key to add. For example, at a site that runs the news server software as <I>news</I>, the following command run by the <I>news</I> user-id should add the key bounded by BEGIN and END "PGP PUBLIC KEY BLOCK" lines in the file <I>/tmp/key</I> to the default key ring that would be used for authentication:</P> <PRE> <I>pgp -ka /tmp/key</I> </PRE> <P>As a general policy rule, control message signers will not use their control message keys to introduce other keys, so when PGP asks you a question similar to, "Would you trust this user to act as an introducer and certify other people's public keys to you?" answer that you would not.</P> <P>After you have added the appropriate key to your key ring, you need to tell the news software to validate the control messages received. As implemented, the system will perform the requested action if the message can be authenticated and it will mail the message to the news system administrator if it cannot. Clearly there are other possible actions that could be implemented, but I wanted to keep the patches minimal. Future releases of the server software will probably have increased flexibility.</P> <P> <UL> <LI>If you are running INN: <P>Automatic processing of control messages is handled by <I>control.ctl</I>, which you edit in the same <I>site</I> subdirectory where you patched <I>parsecontrol</I>. <I>control.ctl</I> has several lines at the beginning of it that describe the format of the file, and there is an even longer <I>control.ctl(5)</I> manual page. To enable PGP verification in addition to the normal authorization done by <I>control.ctl</I>, use the action <B>verify-<I>pgp_userid</I></B> in the fourth field. <P>For example, if you trust group-admin@isc.org (currently David Lawrence <tale@isc.org>, aka tale@uunet.uu.net, the author of this document) to manage groups in the "Big 8" hierarchies, you could have lines like these (but don't use the backslash continuation, which I have used here for readability; keep it all on one line):</P> <PRE> newgroup:group-admin@isc.org:\ comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:\ verify-news.announce.newgroups rmgroup:group-admin@isc.org:\ comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:\ verify-news.announce.newgroups checkgroups:group-admin@isc.org:\ comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:\ verify-news.announce.newgroups </PRE> <P>Additionally, if you like the logging feature available with the action <B>doit=<I>logfile</I></B>, you can get the same logging by using <B>verify-<I>pgp_userid</I>=<I>logfile</I></B>.</P> <LI>If you are running C News: <P>Automatic processing of control messages is handled by <I>controlperm</I>, which you edit in the subdirectory where you patched the control message handling scripts. There is a <I>controlperm(5)</I> manual page that describes its format. To enable PGP verification in addition to the normal authorization done by <I>controlperm</I>, use the action <B>p</B> in the fourth field instead of <B>y</B>.</P> <P>For example, if you trust group-admin@isc.org (currently David Lawrence <tale@isc.org>, aka tale@uunet.uu.net, the author of this document) to manage groups in the "Big 8" hierarchies, you could have lines like these:</P> <PRE> comp,sci,misc,news,rec,soc,talk group-admin@isc.org nrc pv </PRE> <P>You could then remove the line that follows the comment, "but his name can be forged, so don't let him rmgroup..."</P> <P>Note that there is no provision, with the current C News patches, for checking that the signature matches a particular string, just that it it has a valid signature. This is probably adequate security as long as you keep the news user's PGP key ring limited only to people you trust to maintain newsgroup hierarchies.</P> <LI> If you are running some other system: <P>You're out of luck until someone writes a patch and instructions for your system and makes it available to me for redistribution.</P> </UL> <LI> Test the system. <P>Get <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/sample.control"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/sample.control</A> and save it to a file on your system; <I>/tmp/sample.control</I> will be used for this example. You'll use it to make sure things will work as expected.</P> <P>To verify the control message, you will need the <A HREF="#comp">key for news.announce.newgroups</A> and authorization in your news system for group-admin@isc.org to automatically perform "newgroup". Go ahead and enable it for the test even if you don't want to really allow this, because it is easy enough to rescind after the test by editing the control message authorization file and removing the key with <I>pgp -kr news.announce.newgroups</I>.</P> <P>You can check that the <I>pgpverify</I> part of the system will work properly simply by feeding it the sample control message on stdin: <PRE> pgpverify < /tmp/sample.control </PRE> <P>If if could run pgp and find the correct key in the default key ring, the string <B>news.announce.newgroups</B> should be printed. The exit status of the script, found in most shells with the command <I>echo $?</I> as the next command after <I>pgpverify</I>, should be 0 (zero).</P> <P>If it doesn't work and you've tried and tried to figure out why, <A HREF="mailto:tale@isc.org (David C Lawrence)">email me</A> a complete description of the problem you are having and how you have tried to remedy it. At a bare minimum, your mail should include a copy of the message you are trying to verify, a typescript of the attempted execution, and the output of <I>pgp -kc</I> and <I>pgp -kvc news.announce.newgroups</I>.</P> <P>When <I>pgpverify</I> passes its test, use the appropriate procedure below for you news server to verify the authorization system.</P> <P> <UL> <LI>If you are running INN: <P>First, cd to the directory where <I>parsecontrol</I> is installed. Then execute the following four lines, in order, as the user who owns the news system:</P> <PRE> /bin/sh PROG=newgroup set "--" group-admin@isc.org "" /tmp/sample.control (. ./parsecontrol "$@"; echo $ACTION) </PRE> <P>If the message verified correctly, the <I>echo</I> command should output <B>doit</B>; otherwise, verification failed and the output should be <B>mail</B>.</P> <P>Edit <I>/tmp/sample.control</I> and change all occurences of <B>newusers</B> to <B>newgroups</B>. Then repeat the <I>parsecontrol</I> and <I>echo</I> lines. This time verification should fail.</P> <LI>If you are running C News: <P>Because of the way C News is implemented, I have not taken the trouble to find out how it can be tested without running through the whole <I>newgroup</I> script. If you are testing with <I>sample.control</I>, I think this should let you know whether things will work:</P> <PRE> newsflag news.announce.newusers y newgroup news.announce.newusers moderated < /tmp/sample.control </PRE> <P>(newsflag is the C News program <I>maint</I> subdirectory; newgroup is in the <I>ctl</I> subdirectory.)</P> <P>You should get a mail message telling you that news.announce.newusers was changed to moderated. If it didn't appear to work, doublecheck the <I>active</I> file. If it really didn't work, fix the status of the group with the following command then let me know about.</P> <PRE> newsflag news.announce.newusers y </PRE> <P>If the message did verify correctly, edit <I>/tmp/sample.control</I> and change all occurences of <B>newusers</B> to <B>newgroups</B>. Then repeat the <I>newgroup</I> line with an <B>unmoderated</B> argument instead of <B>moderated</B>; the argument is unused in the PGP verification code and doing it this way saves you the effort of <I>newsflag</I>ging things again.</P> <P>With the changes to <I>sample.control</I> you should now get a mail message saying, "authentication failed".</P> <P>When you are all done, make sure news.announce.newusers is really marked moderated in your <I>active</I> file.</P> <LI>If you are running some other system: <P>You're out of luck until someone writes a patch and instructions for your system and makes it available to me for redistribution.</P> </UL> </OL> <H2>Frequently Asked Questions</H2> <OL> <H3><LI>How come this presumably valid messages doesn't check out with pgpverify?</H3> <UL> <LI>You don't have the latest version of <I>pgpverify</I>, which fixed whatever bug is causing authentication of the message to fail. <LI>You don't have your PGP configuration files and keyrings in the default path used by <I>pgp</I> and <B>PGPPATH</B> is not correctly set in your environment. Either move your PGP directory to the default location or set the <B>$ENV{'PGPPATH'}</B> line in <I>pgpverify</I>. (Warning: some INN versions set <B>$HOME</B> to <B>_PATH_NEWSLIB</B>, so this might be the source of your trouble.) <LI>You don't have the correct key for the user that signed it in your key ring. <LI>You are using a non-English version of <I>pgp</I>, set up with a "<B>Language</B> = " line in your PGP <I>config.txt</I> file. This means pgpverify can't find the string it is looking for in the <I>pgp</I> output. <I>pgpverify</I> tries to overcome a non-English language specification by setting <B>LANGUAGE</B> in the environment before calling <I>pgp</I>, but <I>pgp</I> overrides the runtime environment with the <I>config.txt</I> variables. <LI>You cut-and-pasted the message in your window system, which converted the tab characters in the original message into spaces in the message you are trying to decode. Having this handled completely correctly by the signing/verifying code is harder than you might first think. <LI>You are running <I>pgpverify</I> on a saved copy of the article that includes an extraneous trailing newline, such as might be inserted by saving the message from a mail handler or news reader, that was not present in the original message. <LI>You cut-and-pasted the sample INN <I>control.ctl</I> lines above and left the continuation lines in, instead of joining each group of three physical lines comprising one logical line to just one physical line. </UL> </OL> <HR><HR> <H2><A NAME="Keys">List of PGP Public Keys for Newsgroup Administration</A></H2> <P>This is a list of keys known to be used for maintaining various parts of the newsgroup namespace. They are listed alphabetically by the hierarchies they are used for, along with the email address they are sent by and the pgp key userid of the signature (both for use in <I>control.ctl</I>). The group that people should follow if they are interested in tracking announcements about the hierarchy is also listed. The "Check also" references point to locations that should have identical public key blocks; it is best if you confirm the block listed here by checking against the others.</P> <P>The existence of key here only means that I, David Lawrence, trust the person who uses it to be a responsible maintainer of that particular hierarchy of groups. You are solely responsible for deciding whether you will use the keys here at your own site.</P> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="alabama"><HR></A> <H3>alabama, hsv</H3> Control message sender: <A HREF="mailto:news@news.msfc.nasa.gov">news@news.msfc.nasa.gov</A><BR> Key User ID: alabama-group-admin<BR> Administrative group: <A HREF="news:alabama.config">alabama.config</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xE881E753"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0xE881E753", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 4.0 Personal Edition mQCNAzL4ssYAAAEEAL7Bwtfi0Vblm4/ALgx9sPBn1S27h4VIo9Fnek3mv9zzraFV mOqk55IRrBn7zBuOM02CIHGPoRtIq20mOcjNZPWyFFr1q1HsPync8MZbAYmSptNd 4tNNe8W+Xy9k5iWBuxjdOG40sGRw478JiMovjo4bs+Vll7dDOP2T9nLogedTAAUR tBNhbGFiYW1hLWdyb3VwLWFkbWluiQCVAwUQMvi1Ja12xw2xQ7dDAQGp7QP/XcZy KlFvq8f7c7AnSpGxMFlo0jNJqYc/UNYy76VqKmXUvcwGXWaJB6vAMU9yxsqyTYhj OcE0ds4KILY0KJN31a+jW+H58ty8niL6VyiOTiKAEUHs7FwPCc3TkprY8GiKxDEx xofcyT+PPeAlykU5ljEie3x5aUnX1mCRSh2+++8= =3et7 -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="be"><HR></A> <H3>be</H3> Control message sender: <A HREF="mailto:news@innet.be">news@innet.be</A><BR> Key User ID: be.announce.newgroups<BR> Administrative group: <A HREF="news:be.announce">be.announce</A><BR> Check also: <UL> <LI><A HREF="ftp://ftp.innet.be/pub/staff/stef/be.announce.newgroups.asc"> ftp://ftp.innet.be/pub/staff/stef/be.announce.newgroups.asc</A> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xBA8601A1"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0xBA8601A1", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzLiE1oAAAEEAMx8KAOO9TJzY8A9scImT1CFTZHe7gzynsvlzDprmGRoWYBa xf1z61buwk24WnC/hXcHwKKxTi2gZ2UaFlrJLcsgtCo1+7000UYY1OrVSuojD5i6 0Senfi45cTqD/I5UH6qrGgfs6dacWXk6Fauw7ivvWMcvKys6Tx4Em/q6hgGhAAUR tBViZS5hbm5vdW5jZS5uZXdncm91cHOJAJUDBRAy4hNaHgSb+rqGAaEBASoyA/sE nEec3XRO9CnycCUYlw6Ls38+rW4KZZws/saeXuzSC5YF0mKM0LewuvQ53eogepYD ybubtfdMjb2qvMQYHUvJzKiGymq02WTB6X+gZRKxywCroSU3057wLIAfX/GBe/zy EMJV16sienUOFC5kjkkMEde4MA/QohlEKnGyt7xlWA== =kCY2 -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="bit"><HR></A> <H3>bit</H3> Control message sender: <A HREF="mailto:jim@american.edu">jim@american.edu</A><BR> Key User ID: bit.admin<BR> Administrative group: <A HREF="news:bit.admin">bit.admin</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x06DBA755"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x06DBA755", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzMlxQkAAAEEANTwEZGPrVPUc2LSw1Szbn8Vu9X/rsqmAuzITEA8+b7mDL6O SMFDJcxqFo29oUWOwlgc3Ew01nk/ZcWYBhO1HkYCa7Ioz8bW8JiL8RWMA9x1WSjk GBWdFiqszRFNZJztrpGqzs95kO12v17OQHTrJhr4z5+BqPKitbeWec8G26dVAAUR tAliaXQuYWRtaW6JAJUDBRAzJckst5Z5zwbbp1UBAa9mA/9o2EkQnw6lR+4TDRO6 wDXGWtIswiImcEmOvWUC0/IZkBjX/0m+q1u6T4IA0G2SWevtda2lD21c+VRY8vV3 wKdLpiLTD9FMPYaraMyVBHFNFmoiQYwT7T/8n63gQEb/k0aK1UDWRfqS0r7H6Hvl 4RLF6N7Qa8f9VULKMbVtFdbsyw== =I2GM -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="cl"><HR></A> <H3>cl</H3> Control message sender: <A HREF="mailto:cl-koordination@dinoex.sub.org">cl-koordination@dinoex.sub.org</A><BR> Key User ID: Dirk Meyer <dirk.meyer@dinoex.sub.org><BR> Administrative group: <A HREF="news:cl.koordination.einstellungen">cl.koordination.einstellungen</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x331CDA5D"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x331CDA5D", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i mQCNAy/SKTUAAAEEALT9vGQnDIzghnYdH5u7zeRqZPXH+2Wbq0q1FD334xciOQMh S6DtELkvVzA4x1PoTvDminXVoPQHtNKs4iMSM6uT5c9JxmdTlfrTfN0JeNi8Jz0E f0NxJk05cjhBKACGrD/AMvnQetUhmbSH3ss/XXfq4kVb+an+0eUVKCUzHNpdAAUT tCZEaXJrIE1leWVyIDxkaXJrLm1leWVyQGRpbm9leC5zdWIub3JnPokAlQMFEDGR Cn+1DQM/pC6J0QEBIYUD/1tCHIH1paJeke4cQA4rK+kSqPmOGLwP5ZFSYymvQ+Ou rzDgNKQYsjpM0o491QW7USC67+gFq27eb6df6L59Ovj3hzW+k2vMo9Qzwxm9MTHv d8W6kl4AgL+kj02CGR+BTfEu8H8tu7xLOJ+gCi6g4NjjgTk/d/QvoitqzAwzNNeS iQCVAgUQMQDUTTmkCa1sPF5lAQHNXAQApSyxW2FVS8nsLbHSsz6rn9s22W7Txu1b 9Y3lgqCrrFkBzJbuMBWV2kxmTkNJlM8VJWXLumwJflcG7wLSMR7p7zbzdkLRrlqf lJOBxUgb4V/Hy3yEYyo/mb/2334tJMXqUF0sYe0SV6JGEYXtm+P2JoyHjkZt+Hko YBW3WOvjCV6JAJUDBRAw/dtM5RUoJTMc2l0BAfmqA/4oytREfOOUkIcOyUimZ8Dh ok0TJ6Hn5+OneTaK1WxVPgbafSOE8M+0pL7mvbJnfQgniIJjwgJBGQYu4yTh+F2R jQhCpCeNWc/UPH455d1v+IuJQoLZ0JwqthKztFJ4Amqma95OAE8rWQ/tNmDt2SdC liUbqkUEOOaa8LfxqvAQXA== =3Hvu -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="clari"><HR></A> <H3>clari</H3> Control message sender: <A HREF="mailto:clarinet@clarinet.com">cl*@clarinet.com</A><BR> (But see <A HREF="http://www.clari.net/tech/inn.html#signing"> http://www.clari.net/tech/inn.html#signing</A> )<BR> Key User ID: ClariNet.Group<BR> Administrative group: <A HREF="news:clari.net.admin">clari.net.admin</A><BR> Check also: <UL> <LI><A HREF="http://www.clari.net/tech/clarikey.txt"> http://www.clari.net/tech/clarikey.txt</A> </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzHhqEwAAAEEAK4YEXf3jB1ArKUs8bUMT666mjovSpCiuNGhTClxwLvSJrrB K4n5ibvAPqAKh8T1AxqDdprDPWPdm/uGAF6/3gFHD8YFA1wU2EayYNWlQ1kvDRI7 bkmkq4QC2rtLnYpsOxwxyjTFsY1cvav+SSLziYauIlsOcHcix8rAq9eiL9vNAAUR tA5DbGFyaU5ldC5Hcm91cIkAlQMFEDKjVJHKwKvXoi/bzQEBEA4D/095q7TCeLji h1+qYHD52g2YuTRfL4NlGGmvEZjaHIe+Da6YBrCwKQVnZahckSv5VoHYhccKTtfz 6BJ6+EfdcqvJdXoTkP1IqKFKr4yHL/QS6TWUrC4pjAF7WTg0jKdPMbwjFR983sIi KzhYhzUEfXdmNaooA+pYaDhl/SUGqh8q =stal -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="comp"><HR></A> <H3>comp, humanities, misc, news, rec, sci, soc, talk</H3> Control message sender: <A HREF="mailto:group-admin@isc.org">group-admin@isc.org</A><BR> Key User ID: news.announce.newgroups<BR> Administrative group: <A HREF="news:news.announce.newgroups">news.announce.newgroups</A><BR> Check also: <UL> <LI><A HREF="ftp://ftp.uu.net/usenet/news.announce.newgroups/PGP.PUBLICKEY"> ftp://ftp.uu.net/usenet/news.announce.newgroups/PGP.PUBLICKEY</A> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xB88DA9C1"> pgp-public-keys-beta@pgp.ai.mit.edu</A> ("Subject: GET 0xB88DA9C1", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.7 mQCNAjFsLmQAAAEEAKPbDQI6oDtYJYPvYxt7I4PMxThaq51Z/5kqfW7C3dMn6vPL d+UsXHfRzMaQXkLBR4nIaQj5OHVtbKCjVTVIMtgfgsPeh9GRSONW870S5HUTQcB7 eDhQqvvst1ZEowhTf/CX01chaxOfWq3ZPB09VVohQTmvRJn2BMJdOtO4janBAAUR tBduZXdzLmFubm91bmNlLm5ld2dyb3Vwc4kAlQIFEDF33BHCXTrTuI2pwQEBiJQD /1uiv20adyB2a3tzBYESEEhKtugAVHGRJQJE4Ar5PrcnovF3aNpLFumslIaAzCwP XlCANMjFHg140IB6SgJ8W8XH15u+1cMOmqTbk0wtmVgeLOLaSMgNWt65FV4AUn7e RZdhK8j/JKxE0a+6gKu4S0PiUDrvnCEWUPjlXiqsbnjR =E8K8 -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="de"><HR></A> <H3>de</H3> Control message sender: <A HREF="mailto:moderator@dana.de">moderator@dana.de</A><BR> Key User ID: de.admin.news.announce<BR> Administrative group: <A HREF="news:de.admin.news.announce">de.admin.news.announce</A><BR> Check also: <UL> <LI><A HREF="ftp://ftp.thur.de/pub/people/lutz/pgpnews/German/PGPKEYS"> ftp://ftp.thur.de/pub/people/lutz/pgpnews/German/PGPKEYS</A> <LI><A HREF="http://pgp.ai.mit.edu/htbin/pks-extract-key.pl?op=get&search=0xD3033C99"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0xD3033C99", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzGeB/YAAAEEALZ+Xfm/WDCEMXM48gK1PlKG6TkV3SLbXt4CnzpGM0tOMxsT HjlHaU6Xco5ijAuqM1wEGUHD5hw/BL/heR5Tq+C5IEyXQQmYwkrgeVFMOz/rA3Rf rd9aKQk1bXBxmavi9WxdXP2zxuSglc395StvmO+WxXbBCg1POnU26rXTAzyZAAUT tBZkZS5hZG1pbi5uZXdzLmFubm91bmNliQCVAwUQMaEnw/Ki8vYA8NXpAQF7kQP/ YNaIHxaHzqQQwfcTG+ICdoiIakmainbZyyHwOYV6nG+sPlRnkPnlC9RP2I+wE91o WrPHQLlZv1a7+VkXstmHtzW+JzzaaQGaH2+E9wOXMMI97/7GtsCfjEKWi8OZPDEE SloZH+ibsyPXCnOb7LPUyfGuh8RK9aUAnZUEmAzi20+JAHUDBRAxn7vcfZiDsyJG Qh0BARv+AvoCVp8UUmQ+Us5OKwGNZfLgVjOa3o9q/MMCR7eGdR3rqUiTL23YVD2s j4/L2nBnwYF0vLkiPhhrAVO7Gq/z29D5g2vQXJdH0NHc4CAUps0Uls6w8n5Uy3Xu fB4DCQx/f7WJARUDBRAxngnCCdxwOTnzf10BAcKUB/9F8pyUyGKYc8I9lj3oUxe2 Piz+3DtTpBxvf3zQwylxFnWgZ9ZwuqhXmyzhBdUmGmT8xmk1jONJZyrR6P38D+h5 EduaQ2mKKa3iNgYMwv5Qzh5UCka7NLXkfylsuXOCFDNhSaY4jU4HLgI5ngL8gJJ1 7LnC5heUw6yvO8wyUyH4cW8rbv5Ov+22t/9d48x44hvcHZZ4ZOWvYh+dQGAH484t sK7CXqvH5QYHxetUSq/p2mlEsxf0tzgEAoQ9TZ0/Ai9o5/6H7EgGRTPRLMxJd+/H y9iJs4QRI/gCjdqcvzHj1wHtLcVWiG+qQZxIXeX/u665Qe7aSSSrGLp7QOmFnAo1 iQCVAwUQMZ4H93U26rXTAzyZAQE0IgP/dTnrrgsVLRAa5gJYVWmQgSqkXYcsVgYt isBpaGJSW2+5ifD7vaPu9Vj4aNvqO4zyzdAoWXiqRJ/qiXgoeG7DV01tw8s197RH IB+DQ6hLuF0IX4dtbGjpiujapwXQ0s3fcu/UuLBRv5UJtNU9hD8vGFkj9mYBzA8L XjtwTuQVfBe0Ezxtb2RlcmF0b3JAZGFuYS5kZT6JAJUDBRAxngjIdTbqtdMDPJkB AXQsA/96/iGcbkpEaOUdb3aQCzCDocUGCDH9UrRfjT0sjTMgAmXELdukCiMyt1KT +vnnPqiwNRdIPD4h3Qk8U70BY6JCAAC03rOtg6EcUGn7ryH2TrvhiD0geqPcFZ1G MkXq08qh9g9Wm9Gi8zP6VI7L1lyxuz7m3w+P1lUBDJ/EGSoPkA== =i/Qv -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="efn"><HR></A> <H3>efn, eug</H3> Control message sender: <A HREF="mailto:newsadmin@efn.org">newsadmin@efn.org</A><BR> Key User ID: eug.config<BR> Administrative group: <A HREF="news:euf.config">euf.config</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x265C90A7"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x265C90A7", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 4.0 Business Edition mQCNAzLXM7UAAAEEAMddVSqOf6hpg5YFwOvJYMZM0GvJut1IdM+ioq2ol1VrD5pN qykjqgn8dOCvM07r64yTRFHMG2iX13ibWrlRv0ot4Wf3K4ZPyGb97lUxz47x7XKB rYiNxZSo38YoecqpWXyAzKP98woBL3xzl1wc5muPssRlGPxBKawdUS4mXJCnAAUR tApldWcuY29uZmlniQCVAwUQMvzweawdUS4mXJCnAQGppQP+I8CYmfETXSP6gAbQ 3hgcE9tgtPtewTgAlV4m0VconEtqwI3b8tjgzC0gtnprvcZ1vCfRkjVNl9kIA+sV +dHLVy0EeAKXLqZaUlX3TKU8WA9U2VzABiHSPWpbkeNFUiR9hS/BBlh4WL/T8mqg N7GmwFYwYCGqcrvkFkFdIZKylOM= =cGP0 -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="es"><HR></A> <H3>es</H3> Control message sender: <A HREF="mailto:news@news.rediris.es">news@news.rediris.es</A><BR> Key User ID: es.news<BR> Administrative group: <A HREF="news:es.news">es.news</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x6D457F19"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x6D457F19", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzKltbIAAAEEAM9cNJJ8gJDDOA2mN9EDBlw4jOqFywOIUU8g+vBTJXnJi389 TSfsZTneJAw2rROf/CyNVVpM5RKIN9QotvqQV80SkpMOnShGWbp4JgeYl2Mz1dki Rtcs4dZ2MrnAK62eresA9f0LpPktTqV6KaFvugRewAoNnl9GnZAe7JVtRX8ZAAUR tAdlcy5uZXdziQCVAwUQMqW1spAe7JVtRX8ZAQFBqgP/ddF/iolVGKNIoYLHVpb9 KcmJ0q6zB3+JynSz8Bsugg9Ojh2NlujzGeDVN8eY2eOkrAqYt806LCUEsAZTVwGv VufAr3jVIIZrhdnTziMdJfq5GixzkJKwDNbOp/5z85wSGrmc5FlmoJ8lEvFznuP5 nnVjbiyR9Tqc3Ny9omAR2z8= =LeAj -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="eug"><HR></A> <H3>eug</H3> See the <A HREF="#efn">efn</A> hierarchy entry. <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="fido7"><HR></A> <H3>fido7</H3> Control message sender: <A HREF="mailto:newgroups-request@fido7.ru">newgroups-request@fido7.ru</A><BR> Key User ID: fido7.announce.newgroups<BR> Administrative group: <A HREF="news:fido7.postmasters">fido7.postmasters</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x02D04EF1">pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x02D04EF1", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i mQCNAzHp+EYAAAEEAMPTJYTs7vtBxL3seNLTIqfKfAEtBBw9DXgf5/Oqgq9Tr1pR 1iIRDNzLUxbtgYxbis7sS/9DjpjfMzxmhOAQgXPGcNPws56zj4pThKcb3+e+e2Ap /7BJwmvdStuDNZBev2gCehkAC+BDhIYmkr+glH0RlvMo6Iztnt8dj6gC0E7xAAUT tBhmaWRvNy5hbm5vdW5jZS5uZXdncm91cHOJAJUDBRAy25lJ1T70qQVgy2EBAYQA A/9A/+oiR/AjhkOi/O1cKyT6qirb+amb1S3z00BA7eBo2oZVoClxOBe2XYJYUKtm dVe6DnqmZjZfDDw8rozLuBURFVLnB37K71tzWCioRZZ9APVT/DtSEa2N7KpPInod disB9+qXPXbGWdlMjDHk8RGMlmN6CfB+yhpZGiztKo6m9Q== =Qpjh -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="fr"><HR></A> <H3>fr</H3> Control message sender: <A HREF="mailto:control@usenet.fr.net">control@usenet.fr.net</A><BR> Key User ID: fr.announce.newgroups<BR> Administrative group: <A HREF="news:fr.announce.newgroups">fr.announce.newgroups</A><BR> Check also: <UL> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x382B64FD"> pgp-public-keys-beta@pgp.ai.mit.edu</A> ("Subject: GET 0x382B64FD", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i mQCNAzF41OMAAAEEAOnjgblNPQ+Xhnxw3K/EMz1vm2sfi2Ci/XG8HsWg2yc+hQla fMGQbQciSDFsBK0Kmy7gNvC9c7qAsQfeqpvQqJ+3hJiUvbQIi6bj2ZOSqE58Vh80 7Y+Fx71R/AKGZ88dGbysUg1r5770aw6JP1wn6Ve29PRTdS7yasmXGhU4K2T9AAUT tBVmci5hbm5vdW5jZS5uZXdncm91cHOJAJUDBRAxf8MhyZcaFTgrZP0BAZ0ZA/0S nxzmcN/yI858v+80ZpWaMkO/OtdF49gCfv/yv8xrRQfdGkjLFIl+Gry/H9236MZD rTSjb5R2PaicExO3b0tcRAAGOXyrRwc1squDdSvldko2ewQE9giZ4T1+fJRou1yO hbwPmaOBOt2EropUpvRPfKNeu/vjdKv1GEREkhIZTQ== =o/05 -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the benefit of a rudimentary html to text converter --> <A NAME="gov"><HR></A> <H3>gov</H3> Control message sender: <A HREF="mailto:gov-usenet-announce-moderator@govnews.org">gov-usenet-announce-moderator@govnews.org</A><BR> Key User ID: gov.usenet.announce<BR> Administrative group: <A HREF="news:gov.usenet.announce">gov.usenet.announce</A><BR> Check also: <UL><LI><A HREF="http://www.govnews.org/govnews/site-setup/gov.pgpkeys">http://www.govnews.org/govnews/site-setup/gov.pgpkeys</A> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x7FFD7855"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x7FFD7855", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzG6NYoAAAEEAOC2bDAFQlM5l81+WgWjJErVSCDeEyk+gzLionO42/CcC4Wm eLgCLhl6y4OywoCDipYgOta0FG/dOMP9zTHaptc6HQJ2C+7rlWtSIn/g+Z4skgsP SK2JbHe6FCPUphkV7MZ9iwOeTWpGeVo7T+ujSFRRd4dVk5ap2izi3FB//XhVAAUR tBNnb3YudXNlbmV0LmFubm91bmNliQCVAwUQMwnq+Czi3FB//XhVAQFYxQQA1IGF oFena1a9SI3lC9clkRr9w5nF7y4hh7T0DRg6M6r4naiegmisPFqvM1j8dnC3tU6x 5Vz1ATsP/Uu1GFecJ31u55m+N6pMrv56pqivK5PxV3PbEKV/9fHUT7o/2vsw3wge AmsQ590GSur09cpxSY0TAU/hMQlK0FkN4jnGrAQ= =rTFC -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="hsv"><HR></A> <H3>hsv</H3> See the <A HREF="#alabama">alabama</A> hierarchy entry. <A NAME="humanities"><HR></A> <H3>humanities</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="it"><HR></A> <H3>it</H3> Control message sender: <A HREF="mailto:stefano@unipi.it">stefano@unipi.it</A><BR> Key User ID: it.announce.newgroups<BR> Administrative group: <A HREF="news:it.news.annunci">it.news.annunci</A><BR> Check also: <UL><LI><A HREF="http://www.cilea.it/news-it/PGP.PUBLICKEY"> http://www.cilea.it/news-it/PGP.PUBLICKEY <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x185317B9"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x185317B9", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzMVXxIAAAEEAN0LuCQNW3k//UZAn/yCnVOhFjb02B4iuLZmhdp7fbRaTVIp Fwiljr/mn6xhZA9Lo4BnkZI7VXL8oMeBdmmddY+yWgDYDRpZRa8GmIqJPXDlBsRG 3dr9tshdIMwhaRqihpUeVaqupzKVJyuc0g5d70Q0Y+B//HCuNiHVXW8YUxe5AAUT tBVpdC5hbm5vdW5jZS5uZXdncm91cHOJAJUDBRAzFV8VIdVdbxhTF7kBAYeXA/95 YACqLdQyXPDidE2/otKDayimUNllP281xQj1KXz24kv/0WEZLkCAWMyfbjh9VVKC dMbMzEaVr3pZpoQXT7KiGGCsR6Yi27S0Ajntg3sNZo11wHTdIcoksZyyNhyMVBOz 2l9E63yezzmokmW7EDfNanmi60SRK8t73j6sa9nVVg== =Dsxa -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="kanto"><HR></A> <H3>kanto</H3> Control message sender: <A HREF="mailto:ty@kamoi.imasy.or.jp">ty@kamoi.imasy.or.jp</A><BR> Key User ID: kanto.news.network<BR> Administrative group: <A HREF="news:kanto.news.network">kanto.news.network</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x9DE6D0E1"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x9DE6D0E1", empty body) </UL> <STRONG>NOTE:</STRONG> only used for rmgroup/checkgroups. ty@kamoi says, "anyone who can prepare the charter for the 'new' newsgroup" may send a kanto.* newgroup. <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzMG1n8AAAEEANHuYCPlLcazem3Rc90IQwy3oS3oPlrfRu4Jaq7KK8XC5Zby yiuMm4Y6uQEE0ET63arHDtCSx0+25naYc2g57O37bbqK9nbhsFSP68Fgxl/Eseg+ 7hyqv4kDNz2BaAq27N/9nr5Z1sU/zREqcthjrv1QksL94VqMVUbR7Jed5tDhAAUR tBJrYW50by5uZXdzLm5ldHdvcmuJAJUDBRAzBtembnPou6pBG10BAfmSA/4y/X/k XDCSDNdiKknWkONBbmq+Eco9hc+LTawFPDz7HHpiG+eL9ZebKBpajnqmBzrbNZ1P tLjqQKSpldenmMPdB2l55IT4YdyXvzUg3muRsY087y2a2RrSQ4Xjq4kZoRY6esTQ NjW0NNNU6eMds52VSdH2RjjF6/Pe5XtCnHJvIYkAlQMFEDMG1n9G0eyXnebQ4QEB HnwEAMyRdg9bJ0pxYeC0q48girYaX0hYbxO/QoyH7x0f11X95Kwiuf1s6ixJppwE 14bMWnhzLxwuRR8HWowsUPilaigBULgLB03dzscZdFKeKuL9S0mmjA3oLnKFOASx Py1ePSNIIbverEdSOv3of3HRFznAw+42AchSPZPZEmr8ZleM =3qm+ -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="misc"><HR></A> <H3>misc</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <A NAME="news"><HR></A> <H3>news</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <!-- formatted poorly for the benefit of a rudimentary html to text converter> <A NAME="nl"><HR></A> <H3>nl</H3> Control message sender: <A HREF="mailto:nl-admin@nic.surfnet.nl">nl-admin@nic.surfnet.nl</A><BR> Key User ID: nl.newsgroups<BR> Administrative group: <A HREF="news:nl.newsgroups">nl.newsgroups</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x23E9B3A9"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x23E9B3A9", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzLS7GkAAAEEAM+9XI6apW0uhXWIoWDPcRxwRYU/94rxETu0OHrPqXTSQt8D Eq/UyrZ3eW7AsDG9zsC0zAVjgO2MP+N4+5fcwFtr/sjbaHGbX0j3P51w2LXqWoxM Mm2EcvxC8HqIVE8Z/1Wc1K2wvhrLEzH90injzWD0nTT4WFVXYAjaI3Yj6bOpAAUR tA1ubC5uZXdzZ3JvdXBziQCVAwUQMtLsagjaI3Yj6bOpAQEL9wP8CfsFzW6QdW9w Ofq5EbWPa9JQ70dTtbFpaPKh3MEcv1vpAKlCrmwpEQ0cXTTgYn02VFSWueBI/69v iYOh92BD3+k6Uyku4SkmnoS99H3AfMCwpWsZzgqVStcJF/Q76KCDBHjJ4KHOrR01 sN5wP5ohSRj/0ju05BoJ3WW18xUI/bY= =mqDR -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="nz"><HR></A> <H3>nz</H3> Control message sender: <A HREF="mailto:root@usenet.net.nz">root@usenet.net.nz</A><BR> Key User ID: nz-hir-control<BR> Administrative group: <A HREF="news:nz.net.announce">nz.net.announce</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xB8E552C5"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0xB8E552C5", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzNYhVkAAAEEAMtQi97id2CiV5TFAqB0xWP2S+4+dEx7lqvh/yXdAmMKHgUH UFckf6+Nm62JGjzAvInoKdRN59zL1dYoAB/ZHzthWOlOaleGWM729txFlk6JBuoW A/esv+P0BmG/RslIhp7Cyi9oySdFdQvUzd6RFBybJEC+Q0DCvvsII0K45VLFAAUR tA5uei1oaXItY29udHJvbIkAlQMFEDNYhVn7CCNCuOVSxQEBi/ED/3eZE6LDVYgA IlGgKn3jXK/vECvE3URq9XKdsBQovxEJz1AQEvhJuHzjap5JfbUTqqITZMfmqL6Z IOZeCdGGrKw/SqFRM5Knq1Km6uK2D84m2n2zepsvqHb4IDY6j03pZJAd0r2EAMV+ QOVP7HJ8qn7hgFSiZUuu4Afr7v3K2qfb =aND1 -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="pgh"><HR></A> <H3>pgh</H3> Control message sender: <A HREF="mailto:pgh-config@psc.edu">pgh-config@psc.edu</A><BR> Key User ID: pgh.config<BR> Administrative group: <A HREF="news:pgh.config">pgh.config</A><BR> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzKkdTUAAAEEAMJVCGgsorYtryCzGKYe6tTv5tgE6l4j3eKkYkdn37icoFAx VANFdTHy/1e5GQJxMcnDV3610NQNSXE2sTc8br2IBYqbt7XkyQ48xzW6/qdARQHu b9cp0epIKKOu/4Zguxw+hkLyN4leziO1ts1ThnV2Tkaixu9+BpgGy01AM7MxAAUR tApwZ2guY29uZmlniQCVAwUQMqR1aJgGy01AM7MxAQEYbwP+MZRjtrY/wiayMehw KSDwXZqHh1stPOu/Rh8msk7ebeq4KdnLIgLinwcWZM1v4+ktww4TO2OKXouIVKtL YTNVLYAF3AAmHee00XFDaaZMIOsPfEwr+P4YUjLvxPfj1IEaEQXpODQTLUCqRYZ2 AupSOzmnD4HwwDt5Q5/1BosAg/c= =mXnj -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="pl"><HR></A> <H3>pl</H3> Control message sender: <A HREF="mailto:michalj@fuw.edu.pl">michalj@*fuw.edu.pl</A> or <A HREF="mailto:newgroup@usenet.pl">newgroup@usenet.pl</a><BR> Key User ID: pl.announce.newgroups<BR> Administrative group: <A HREF="news:pl.news.admin">pl.news.admin</A><BR> Check also: <UL> <LI><A HREF="http://www.ict.pwr.wroc.pl/doc/news-pl-new-site-faq.html#pgp"> http://www.ict.pwr.wroc.pl/doc/news-pl-new-site-faq.html#pgp</A> <LI><A HREF="http://pgp.ai.mit.edu/htbin/pks-extract-key.pl?op=get&search=0x838AF8ED"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x838AF8ED", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2i mQCNAzGvEY4AAAEEAL8clpC5yydhkMN1ppivfj3E6EIyZtntScjuCyI+RwpvLf9o So+FLbiMmjjCV7BNjds7c1yaDMPDFetZlqEYKof5Q0QK2bDaaou3wtnDesAXqrde K24GURn0N2BYWR9sEFJ4bwn8fudHelFcAXPt24lI29bu6dX+LddKTteDivjtAAUR tBVwbC5hbm5vdW5jZS5uZXdncm91cHOJAJUDBRAyc5r/10pO14OK+O0BAWq9A/0e So5/56x6hkT0to92FUiIbcoHF6J20sa4edDXbzTHZTvNJh3K4iSBwkspMcx8AWyS 36ckftXsZP2xRTj2Dk4xgLLCcFBjPHt7q5ysa8dChkgEu8770OE5atbQZorzz757 xpOgKmjRXLVbzt680Z807jH/zOo+BRby3ZMJFtGPyrQXPGNvbnRyb2xAYWRtLnVz ZW5ldC5wbD4= =n+Qy -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="rec"><HR></A> <H3>rec</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <A NAME="sat"><HR></A> <H3>sat</H3> Control message sender: <A HREF="mailto:satgroup@endicor.com">satgroup@endicor.com</A><BR> Key User ID: satgroup@endicor.com<BR> Administrative group: <A HREF="news:sat.usenet.config">sat.usenet.config</A><BR> Check also: <UL> <LI><A HREF="http://www.endicor.com/sat-faq/pubkey.asc"> send-satgroup-pubkey@endicor.com</A> (Subject: and body don't matter) <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x98690EE9"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x98690EE9", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzHtkkUAAAEEAN9sqrBBgcjuaG+mWamDYbOz0GARQhY7dli6m6c6zBaAhvZV i2CBy4deMWF5wAWY0SPFTSeowZrkI1fCIFwBt2XRdEj8YY06BpsXYaajvD10yppg Lx70y662p+R7pK7GAlbsaf8o/y31pzbFssJAWA8GGkFbnpRN2gv3azuYaQ7pAAUT tDFzYXRncm91cEBlbmRpY29yLmNvbSAoc2F0LiogbmV3c2dyb3VwcyBjYXJldGFr ZXIpiQCVAwUQMe2S+JEf2RAnz77pAQFDIgQAx4DVWloh7gABTQL1B80YDMaiN0x2 haYSCMXHdteksEbzAocqbdzxaFPC9EXdXjl7pmIIwTFcB66LGTtesIgMOhLrzJlF LmdqHaK6fvHzBzxHSOiSu2DJcMxyT/xj/U163BUFgCspxVqjh3IoGXqWn5l7uie7 S97e+5IjWoiC1vmJAJUDBRAx7ZJjC/drO5hpDukBAdBDA/oDemhuh3iKeurUYhEF cy50jKNJN36joVJ6tw5FhfTtxShLDpkoxzqKLHHbMTK8HXyrtz+qF8aaSKn8DIGr 27wqi3Uz1zzCfM8KHF+4ldmW7+ABPu8Ih1KhgKZ180+xmqYp1qzQJIuqKktWySOG n8F00ZMLQvJk27tF3poaaTq39A== =IUEe -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="schule"><HR></A> <H3>schule</H3> Control message sender: <A HREF="mailto:newsctrl@schule.de">newsctrl@schule.de</A><BR> Key User ID: schule.konfig<BR> Administrative group: <A HREF="news:schule.konfig">schule.konfig</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x21DBB2A5"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x21DBB2A5", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzL9vYEAAAEIAOuQU8rD71soRIS6pcl4w/LbGBbfKMwDMdJxSNZTAjrLfZqB 9i7hUK+YsrYeJbjEE08OydBbSpFTAdxCPF1pXtY2mNtl2EqSdrrCr6Hfkyy3u6uU djIC2DKOTSVVzmI4pK9knmUzUV/AayykRpZ2z7vwbM/CVZoQmHHrum/y1+qGySe6 rm28dW06eXP9uDa9AMSNhso21wkfA7/Q4zx+ovBGqxP1HKQOtUZlkXQPrWB3wkOf JkxBmyC/PnwhHwdUfYeQtc7LGG5DIUEAI7u2sODmrNwo0k2l36/3DbfWV2qWovaZ /JADHsyAw64Wg9J5aE8GxIKDxdHN2GBYViHbsqUABRG0DXNjaHVsZS5rb25maWeJ ARUDBRAy/b5TCdxwOTnzf10BAQvCB/47ccH/4D1Nesd0as2/5gIixfRyXQUi/qZS 69EiLHa9/KhevPuUONb4gzgxojyIGgOZNnADggg/u45EGi01hWriC3buPtTK6BD7 IxwHxmQ3bxiW0/MqrL4FNhXiHYgfOkRBrEPll0YRH4BpuJUOqT5NMpKw6+Dg/n1g zHn2ZRyKnwoQTevJbSS7Bv+nC86crlE1RnINdT378+4JE0NPYmRSGtS324lk7+F+ 8K8N2spzIOGheGKfJAa+N1lyjR6tQdd+snA4OUpgdIanUREbDfwOh8QOqicC4t5k EelqNfsqzN8IcrrSq6yyEirJ+JXtRru5uWPIixDXYlV3wn+SqKGeiQEVAwUQMv29 g9hgWFYh27KlAQGOnQgAo+5wkh7+miBxKxMvd1BVLE6qtrxFiy2D3VQTQ2lU3+lQ m5gmmlx7zByAXLby7JkLFMz3/AnnZG7FuGX6dsr32Xb0bMdHpix0T5yLG8LrYXrT lA9p5nSFhUuiDe0ARkaR6A4w08KSW+MKjPpL2byUsAAlHg/my24RoA8sbA8Yp3q7 3oHQq5LHYoUBnPyG54C4fLBDfhcfyaXZSWtBqdvQW5aoE2z9Seciul24BCFHnVOJ MV11OciKnyH57iy6Wo1/vt4nmdfvr/KNXESVaO9EpoYzF3pkYLHgpkKGFJvYzAaU yB3O2+tHyYEpaspwaFwZ6bJ81cC/Jxp6rQrDdNIxiw== =NKHc -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="sci"><HR></A> <H3>sci</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="si"><HR></A> <H3>si</H3> Control message sender: <A HREF="mailto:news-admin@arnes.si">news-admin@arnes.si</A><BR> Key User ID: si.news.announce.newsgroups<BR> Administrative group: <A HREF="news:si.news.announce.newsgroups">si.news.announce.newsgroups</A><BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x434E1955"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x434E1955", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzNDes4AAAEEAKCcPqRR5rQH0bbUd8tgSMHwdL8anJMb/6+MoYSfgJmmjEZS hOh8mp2aUK5mtAygDtT+uEhz1Aqz5gRKEqfcCyweXAs4Aty9RjJIUJrl3OHqny5c BkXXAIibaYli3tx0tzp0vDDFXZeNcipkRcSaoPhltjijKfuVIu8d3lZDThlVAAUR tBtzaS5uZXdzLmFubm91bmNlLm5ld3Nncm91cHOJAJUDBRAzRDJ7DHODXHe4jmkB AS5/BADN072wLLRs6MZ1imSSfxh6ueCJXxU078OeJmQtYfSlxwJ/dQs862eTY4Tu bhKZUIRgagtrN+rtXxFf4lFVazOzDvpEase50tL8r+PnpZZbwOBXDliU98HP+oN+ TcewX2pTA+163gP9WzBiJtAN67zT4Wu035ECcUYal8J5+XhinYkAdQMFEDNDgbN4 4MaigooJfQEB9F4C/0PP4L9GRW8Pq8HXT8H0FPFDmI9ZLAzym3ZPFh2Grtgnbc9H KOD6Rr0FWNL/mtacUajBsHVwUibANK0AUo8udCm80QIR7t4axjNZlttVvKPCFvdp 9VshQIWKpxV6qWBhFYkAlQMFEDNDes7vHd5WQ04ZVQEBAPID/3VY0GooUrJQu1Rn zSxGNg1qZwuIEmsD/GAinE2bNKbXtqF2pm2DNSn2KNT+WG0uqss4yQO3VmXs8l/s XEHWeEyF/qA+xTSrQIpJW3fLtsroMTuc3d8sZ8oz0ReBenBGfHPPp1m1q8U4rLvD Xf0Gybil7SY5lHnP5GPI9U9vHcd/ =EWB7 -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="soc"><HR></A> <H3>soc</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <A NAME="talk"><HR></A> <H3>talk</H3> See the <A HREF="#comp">comp</A> hierarchy entry. <A NAME="uk"><HR></A> <H3>uk</H3> Control message sender: <A HREF="mailto:control@usenet.org.uk">control@usenet.org.uk</A><BR> Key User ID: uk.net.news.announce<BR> Administrative group: <A HREF="news:uk.net.news.announce">uk.net.news.announce</A><BR> Check also: <UL> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x21F2F1D9"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x21F2F1D9", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAjGL0cgAAAEEAJ6p7fQHn139U9zQawLixrExOUrkFhi1yLb8m8fLxmKTprKn ZNM1nnxMSbRyO8vXohXKKs4G1U2jTpaCkSRrbCiJ5VxWB/B31E/p/vrBXqqQ2amq 3gb4Df9DZub0ZtOhHTF/pPjQmXvAv08umjZWpYlXRmUHBlBhMmOfGXkh8vHZAAUR tBR1ay5uZXQubmV3cy5hbm5vdW5jZbQXPGNvbnRyb2xAdXNlbmV0Lm9yZy51az6J AJUCBRAxi9UdY58ZeSHy8dkBARf4A/4pB46ZibhtdF9z1wP8nImdK6qlaNNf+Kuc svLxwRhn6KX8aaq4xpzbVFeJFpbjaNP9bmGZtaO03qhyOkor/8lkKfkJXTeJxA90 T2rqgrY+XLm5jIK8l4NqXAgYmPm6x1hK9LQVe3EkjhxYqcDOeRQNtnLUM0OZyD2U Pijwt1o3WYkAlQIFEDGL1FGemw5PLx059QEBje0EAKx99yOZ0zQ9FjibuEBStP8t 0BCsRNqkrVjxO513RBXecgcdXdv9hWn+8LNRZx6JLHv/ZpWsdGXqP3oiqj+LRt7W pHnZ55He/njx5DAoPAM/TjgTk7arazSjsJuFhcTP7gHitLDoHxVkUfdLX8h4HH9L WhEnrWEx82EY/29z/xQ6iQCVAgUQMYvTeKSiIc7jUXyJAQHLNwP/Qz+g2RRsuSZr J9L0HAVPLcmloAEGOMFfYJDM/mvxegAYzL8i0HGFbwTH/+E94WSmsWAx1KZ/Z2DY KdI7BUaS8c09a2OtqOEbCd7QBI37seyxG0rTWNpuE0ZXBo0eiQBg37oIW+Faf/tq JQZnALVsV5LDKcf+6+MhgS47HWJ6ZjQ= =SaMt -----END PGP PUBLIC KEY BLOCK----- </PRE> <!-- formatted poorly for the sake of a rudimentary html to text converter --> <A NAME="un"><HR></A> <H3>un</H3> Control message sender: <A HREF="mailto:ungroups@news.itu.int">ungroups@news.itu.int</A><BR> Key User ID: ungroups@news.itu.int<BR> Administrative group: unknown<BR> Check also: <UL><LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x44F62A81"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0x44F62A81", empty body) </UL><PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQCNAzM2VakAAAEEAMj6+3NSJItwhqTJHMsNlGIBz6FxzTohNweqqoIuHhx4Q0sL YP33VAhABmoSCOsbmQUaWruRoO2Xqt+2a+x4klZB9PCIk/reCqS4qNA/Va/6qi65 HIUniiSu3JrineZUjZ7uv65Eolfm7aUi/BpQgw3ymW8Jglgq45lzddlE9iqBAAUT tBV1bmdyb3Vwc0BuZXdzLml0dS5pbnSJAJUDBRAzNlWqmXN12UT2KoEBAb9pBAC8 ppqj/r373Mb5ATZ9+gXpoBk8BIAztSmK1sB+5R/K3JeDFSjKHNnSBjgMLn3KzXHW bJ9I6BK14AbVQ9Cdbk5rzuoVkUTuuCzi1jbgt9yZKwSeI/bStXOsvUU4Gf2dHqwL W4E41GioIMvKYSdymBPAYcVBc/C4PJghfb7B3E0QrA== =MdCR -----END PGP PUBLIC KEY BLOCK----- </PRE> <A NAME="z-netz"><HR></A> <H3>z-netz</H3> Control message sender: <A HREF="mailto:z-netz-gatekoo@as-node.jena.thur.de">z-netz-gatekoo@as-node.jena.thur.de</A><BR> Key User ID: z-netz.koordination.user+sysops<BR> Administrative group: <A HREF="news:z-netz.koordination.user+sysops">z-netz.koordination.user+sysops</A><BR> Check also: <UL> <LI><A HREF="http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xD59F717D"> pgp-public-keys@pgp.ai.mit.edu</A> ("Subject: GET 0xD59F717D", empty body) </UL> <PRE> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzKYLZkAAAEIAMnGhSvvCTsAyAuHGnczJma1wWyeFBe/RkpAMSfFA6DDsk+q VnTblHXVsAVl7gRjv2DOifB1dw52lvCXLCn+IlKvQkD2/JVYSeTxI9IDIT5Ecws0 Rf4TFHrPgS8TjZ6WKlvIEAAmb3P64ZaVZbe7+H11m2HFHV4lZiZA6ktKf1kYc56u b09ZevKjbFLlgSHt/PY2Xaz8fjP1sSzSfh9m+CNYEoTPp4smrXK6yzeen8gtoLYU 5JPrMQ3zZqY6bzy8J9ahi58447n+AdATMQEm8G98LZ4V4MD8iJc4JXPscVtC6Zct MHa6dQSH/T5oDJmN7ekcraPYvdpaTMWF8NWfcX0ABRG0H3otbmV0ei5rb29yZGlu YXRpb24udXNlcitzeXNvcHOJARUDBRAymC4QCdxwOTnzf10BAZu/B/9JldQbFed7 tndj6vX285FgQKswoDJJdAJft3kLohg8ZkXOVEreLJ/Zhh50OH++mLqHcqTgDi4M u2K+KEqxEVaLIDlANUzgy/vtO5atHnQs8n4lCvFLLSx4Wnn2LCZmb+0o69Ap/rF/ l2JWeg+oOERC9IyjrjnD8IkOJii6k42TbVfpTlcc7S/2YLFTg5tGjoRgjROpkC9A BoDy89PcTEHBwfpsPuqFnJ90fcmaIZkZf0uUPCJRpCK9TTbCYp0z8vZZetHbhjiE AXoVh6cIWdVwnDiaAE9Z8LvvL3mzyDA3lzDGQuBLtDjw/N0IavbDK47kV+2HYbfy NI3ISjZXkE0ZiQEVAwUQMpgtm0zFhfDVn3F9AQH+Ngf/TKExNsoL/iH+9xaM2Z1i LbpU17tTntmb/G5tZiPA1XbSCmFnVI8mbe09n8u9JGFco8MGTcshzB/G2DWwE8ff PNFBJFjRbiAn9COg1hSHmosK/3BOXIsSXEkBMIbsitrKQeu6S9tNKOMVekYE6TM7 dN/73r5pGAUv2JBjmQlp3gmsbj8YzczHFcUgXu63wcYMlBBIRHndW7XS9uMTKBOp HpefbrB3qU99GOdXNjmN4ufEWsSWkZceIgwcJ02SHlFf/pHv+CCBGXFtB0hDJvk+ hRPliao6FDCk8unlPClgNotTTtQ6Z3rwKrApJsI7zNHfQpq2UNDeQswOcgjmJ6eQ HA== =vT5W -----END PGP PUBLIC KEY BLOCK----- </PRE> <HR><HR> <H2><A NAME="Signing">Signing Control Messages</A></H2> <P>If you are responsible for sending control messages about authorized changes to a newsgroup hierarchy, then <A HREF="ftp://ftp.uu.net/networking/news/misc/pgpcontrol/signcontrol"> ftp://ftp.uu.net/networking/news/misc/pgpcontrol/signcontrol</A> will sign your control messages so that <I>pgpverify</I> can authenticate them. It is a Perl script that requires Perl version 5 or higher to work. It has several configuration parameters that should be reviewed before use.</P> <P>When establishing a PGP key and control message sender, please use tokens that are not tied to a particular individual. This makes it easier to transfer the administrative responsibility when it finally comes time. (The all-too-common "tale@uunet.uu.net" sender is still appearing in Big 8 control messages because of its legacy in the installed server base; eventually it will be completely phased out and only group-admin@isc.org will be used.) Please also do not sign other keys with the key that is used for control messages.</P> <P>If you will be using this script to sign control messages, please <A HREF="mailto:tale@isc.org (David C Lawrence)">let me know</A> the hierarchy that you are responsible for maintaining and the information that you would like to appear in the <A HREF="#Keys">List of PGP Public Keys for Newsgroup Administration</A>.</P> <HR><HR> <H2><A NAME="Getting PGP">How to Get PGP</A></H2> <P>Information about obtaining PGP can be found in the <A HREF="http://www.cis.ohio-state.edu/hypertext/faq/usenet/pgp-faq/where-is-PGP/faq.html"> Where to get the latest PGP FAQ</A> article, posted regularly in the <A HREF="news:alt.security.pgp">alt.security.pgp</A> newsgroup.</P> <H2><A NAME="Getting Perl">How to Get Perl</A></H2> <P>Information about obtaining Perl can be found in the <A HREF="http://www.cis.ohio-state.edu/hypertext/faq/usenet/perl-faq/part1/faq.html"> comp.lang.perl.* FAQ 1/5 - Availability</A> article, posted regularly in the <A HREF="news:comp.lang.perl.misc">comp.lang.perl.misc</A> newsgroup.</P> <HR> Last modified: 30 October 1996 <ADDRESS> David C Lawrence<BR> <A HREF="mailto:tale@isc.org (David C Lawrence)">tale@isc.org</A> </ADDRESS> </BODY> </HTML>