-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 2014-02-03 18:00:00 CET A few years ago I created a new GnuPG key that didn't rely on SHA1, but then I forgot about it. As a few people pointed out to me yesterday, during FOSDEM 2014 key signing party, I better migrate off my DSA/1024 (and SHA1) key as soon as possible. (and yes, would have been wonderful to think about this a few days earlier) The old key will continue to be valid for some time, but in the future, I will be only utilising the new key. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition. My old key is: pub 1024D/C8F252FB 1997-08-20 Key fingerprint = D4A5 23D0 7BEA 74BB D218 4447 6898 822C C8F2 52FB And my new key is: pub 4096R/CBDA71F0 2009-05-16 Key fingerprint = 1651 5D1E D58A BCB0 36C3 1F59 83B0 B8C6 CBDA 71F0 The new key has been uploaded to the public key servers and can be retrieved by using: (the one listed also supports the Photo ID) gpg --keyserver pgp.surfnet.nl --recv-key 83B0B8C6CBDA71F0 If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs 83B0B8C6CBDA71F0 If you are satisfied that you've got the right key, and the UIDs match what you expect, I'd appreciate it if you would sign my key: gpg --sign-key 83B0B8C6CBDA71F0 Lastly, if you could upload these signatures, I would appreciate it. You can either send me an e-mail with the new signatures or you can just upload the signatures to a public keyserver directly: gpg --keyserver pgp.surfnet.nl --send-key 83B0B8C6CBDA71F0 Write me an email if you have doubts abouts this. Thanks, Lapo Luchini Cf. http://www.debian-administration.org/users/dkg/weblog/48 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQIcBAEBCAAGBQJS78uiAAoJELBiMTth2oCDcUkQAMZveG5mUc60qYEGPmxvUO+c 5g95QSJujvuRm8xwWLhsBEuy9LYCgQ3RNBc7uaD7rypgoMwIyJgRJUlYzw3oTKM6 xqLnkJ09oWpdWnXRClU7PEcDrrkjCxbgbhwgwN8upqgpYzpFw3AzG4URoTF64QpP IIK9pnkkctZyMO8A0ipw6qUIOtjwkGDSvG/LJw9VrbCLrRoL8CjYudyHqz6/fob9 K15Q6cCuF0Fu3Xu8v8kCMdkRnfLExqtwcZs1oDdztlLHN/Td3n/4tvwgSdKSHLoq Sx2ZDGtCaPQ43horkMLdRPpuKDFhgOR+JkeW0NoqUzqWLFuN4EzIQ7oB3lZgxBkU 1336WTP4Y1PY7CEiCjeUQD+VC6FXWrdHeEXggw0dotGqbtyFp64ZvV5xrOGWSS/d +BjXRB6o32k+0kcjajKctfTVNPLIr4+W+ncVBhXEPAHmsmV+BQh6WwsfR4qJdsTV DGVsUXXPlsBnL5zNobu/oZmgBT0huFdxcji16kpGs682Bzs2USJCew+d8KThCmeJ CLEm+F1P9sGyfG0viExr53vm1K6JT/SdPrIGnYueEPbZKHqz4xTU5kwYPHOcLz+i yU/nR9nLJ2NnLZEEr/3LLjzR9nar6kH5b/Q5tLUARMgnuAIOSqzA5RWQ4o8oX8qY jruh2xBVY/HF5kNxycWiiQIcBAEBCAAGBQJS78ujAAoJEIOwuMbL2nHwITMP/0Ny QUd9p7Y7Oy7nfNyFV98MSZmSkws9Km5syqurut4jIiBOUNO125mu366NTui+9SYa eQy1LykeO23FjFW0qPilkhpuC4UhUp8NegghUaLAhXYu80GFsYomRHFo1fs1Axgg MJ/87j8on/+gpJuTSosSr4YES4z+eAHF4RNa+2ULVGtpzWbT1tjBuIxsMxDqQnM+ IWvJx7nx9wwEv67cq4BNC6rnBhGFbO9ErZDeCIAMBWgqsRji/wpa3sjuBi/KurHT FcxaxnU4lzMKSEzdl2k9Zn1u2x6SgHcRw33ofbOSjUqNHJm2d4oOfWi95LihStiP mwumn91UwgefoqF80InRimsyoAYtACtIffeEyTCpEwhK98zai+wkZeaI9cEZ6uMC gh5I8S8Pm+XCsEbWyJe111EbH0FgTHXO0NAft1XcMri3r4L3LhLAcmMznamuXi53 Lb+1ciusRjCINuf0h/Uj5S02b8G9fKKLG9uDxza2wKrcsx0A7qScS4xwClMNhMjf LoO3fyv41o3AekFYokljf9iVlBNLseJvcUMULgl3vWiyWcP7IAik3pGfSa1FtMg3 6d9uiw6/qsoDmf+eijhGszICC9H+a2cIxRC5hMrZcwh9kn3S2SvHULgrE9cOrm6y mLfA0fSZo3xO6PLYST7FFabSk1UlEWEiNX7XtcZ1 =uZ7A -----END PGP SIGNATURE-----