TriLUG Web of trust

small graph of gpg web of trust

I was considering trying to organize a keysigning party outside the TriLUG meetings, and so was interested in getting a rough count of the user base, and how many people were using GPG/PGP. Note: I don't currently have a valid GPG key, I know I should, and will soon.

I grabbed the mailing list archive mbox and ran some quick filtering on it, using egrep, perl, Email::Find and the Email::Find sample code to grab a list of all the email addresses that have posted to the list.

$ egrep '^From' | ./findAddress.pl > addresses

Then I wrote a quick python script (my new prefered language) to try to fetch a key for each item for each email address in the file i generated above, using a key server I found that would allow me to lookup keys by email address.

$ keylookup.py > trilug-keys

I was surprised to find out that I downloaded 74 keys, out of the 434 email addresses I harvested, and that roughly 17% of trilug posters have a key out there. (They don't show up later since there isn't any trust for them within the keyring I generated.) I then imported all of these signatures into a new keyring (I created a dummy account on my system to to this, told you this was a hack job!)

$ gpg --import < trilug-keys
$ cp ~/.gnupg/pubring.gpg /tmp/trilug-keyring.gpg

Then I went over to the Debian web of trust pages, grabbed the code and generated some pretty pictures. The smaller ones aren't much smaller, since I started small, but since I lifed parts of this whole cloth from the Debian site, I left them there.

$ gpg --list-sigs --keyring /tmp/trilug-keyring.gpg | ./sig2dot.pl > debian-keyring.dot
$ neato -Tps trilug-keyring.dot > trilug-keyring.neato.dot.ps
$ dot -Tps trilug-keyring.dot > trilug-keyring.dot.dot.ps
$ convert trilug-keyring.neato.dot.ps trilug-keyring.neato.dot.jpg
$ convert -geometry 1024x768 trilug-keyring.neato.dot.ps trilug-keyring.neato.dot.1024.jpg
$ convert trilug-keyring.dot.dot.ps trilug-keyring.dot.dot.jpg
$ convert -geometry 1024x768 trilug-keyring.dot.dot.ps trilug-keyring.dot.dot.1024.jpg

Thanks for reading my boring story. Heres the stuff you were looking for in the first place.

Parser Output PostScript Smaller Output Jpeg Huge Output Jpeg
neato sig2dot.pl trilug-keyring.neato.dot.ps (16k) trilug-keyring.neato.dot.1024.jpg (29k, 907x768) trilug-keyring.neato.dot.jpg (48k, 1256x1054)
dot trilug-keyring.dot.ps (16k) trilug-keyring.dot.dot.1024.jpg (45k, 1024x412) trilug-keyring.dot.dot.jpg (47k, 1029x414)