The member signature

What it is

The member signature over the token. Principal member (-I member).

Why it exists

This is the member's house key saying the token is the card they sealed. Dalton does not sign in the member's place. A sealed card has this signature and Dalton's witness over the same token.

How to verify

Download this file as mr.token.sig. You also need mr.token and allowed_signers. Then check the member's house key.

Open this from a sealed card to download the file for that member.

curl -fsS -o mr.token TOKEN_URL
curl -fsS -o mr.token.sig MEMBER_SIG_URL
curl -fsS -o allowed_signers ALLOWED_SIGNERS_URL
ssh-keygen -Y verify -f allowed_signers -I member -n easyeasy-mr@easyeasyspeakeasy.com -s mr.token.sig < mr.token

The token and allowed signers are the other icons on the card. The member key listed in allowed signers is the member's house key, not Dalton's.

All four checks for this card

The other pieces

Generic how-to: How the digital seal works