Member register

Verify digital seal

Leitz · 1

Public card
Sealed

Sealed with the member's house key. Witnessed by Dalton, the doorman and bouncer. Open the guide to verify.

The four files

Each icon on a sealed or stale card opens a page for one of these files. That page has the download. The commands below are filled for this card.

The unsigned card. Filename mr.token. Signatures are checked against this file.

The member signature over that token. Filename mr.token.sig. Principal member (-I member).

Dalton's witness over the same token. Filename witness.sig. Principal dalton (-I dalton). He did not sign the card in the member's place.

The OpenSSH allowed_signers file. Filename allowed_signers. It names the member key and Dalton's key. It is not a signature.

Member

Sealed with the member's house key. Download filenames match the card.

curl -fsS -o mr.token https://member.easyeasyspeakeasy.com/api/public/mr/1/signature/token
curl -fsS -o mr.token.sig https://member.easyeasyspeakeasy.com/api/public/mr/1/signature/member.sig
curl -fsS -o allowed_signers https://member.easyeasyspeakeasy.com/api/public/mr/1/allowed_signers
ssh-keygen -Y verify -f allowed_signers -I member -n easyeasy-mr@easyeasyspeakeasy.com -s mr.token.sig < mr.token

Dalton

Witnessed by Dalton, the doorman and bouncer. He did not sign the card in your place. Verify principal is dalton (-I dalton). 

curl -fsS -o mr.token https://member.easyeasyspeakeasy.com/api/public/mr/1/signature/token
curl -fsS -o witness.sig https://member.easyeasyspeakeasy.com/api/public/mr/1/signature/witness.sig
curl -fsS -o allowed_signers https://member.easyeasyspeakeasy.com/api/public/mr/1/allowed_signers
ssh-keygen -Y verify -f allowed_signers -I dalton -n easyeasy-mr-witness@easyeasyspeakeasy.com -s witness.sig < mr.token

House signet

Public key: https://door.easyeasyspeakeasy.com/.well-known/easyeasy-mr-witness

Generic how-to: How the digital seal works

How members apply a digital seal

How-to on the door: hdi register sign.

  1. Edit the card, then save.
  2. Print a one-line token from the door. Redirect it. Do not add a newline.
  3. Sign that file locally with your house key using ssh-keygen -Y sign.
  4. Upload the signature.

Saving after a digital seal makes it stale until you sign again.