Found this good howto about key signing. I didn't know that gpg can download and upload keys directly from key servers like pgp.mit.edu - very convenient.