I was reading this wikipedia article on Keysigning: https://en.wikipedia.org/wiki/Keysigning and I then came across this discussion Stack overflow about message signing with RSA: https://stackoverflow.com/questions/454048/what-is-the-difference-between-encrypting-and-signing-in-asymmetric-encryption
In reading them it seems they are slightly different things but I wanted to double check I'm not misunderstanding what I've read. Could someone please clarify if they are the same or different things?
From what I am understanding, key signing is using a Certificate that proves you are the owner of a private key to sign someone else's Certificate, proving to a 3rd party that you trust that the presenter of the certificate owns their private key. This is normally done in PGP systems.
Message signing is using your private key to generate a message signature that can be read by anyone with access to your public key. So, if I took today's date and a nonce and signed them with my private key I'd produce a hash that anyone with my public key could retranslate back into todays date and read. This can be incorporated into a message to prove to the receiver that you are the sender.
Both the digital signature and the key signature have the common ground that you can use the signers public key to verify that they are the one who signed it, but they server different purposes.
Is my understanding of both correct?