-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1,SHA512 Mon, 27 Sep 2010 12:15:44 -0700 For a number of reasons, I've recently set up a new OpenPGP key, and will be transitioning away from my old one. The old key will continue to be valid for some time, but I prefer all future correspondence to come to the new one. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition. The old key was: pub 1024D/17063E6D 2000-03-22 Key fingerprint = 9FA3 C49C 23C9 D1BC 2E30 1975 1FFF 4BA9 1706 3E6D And the new key is: pub 4096R/DC6DC026 2010-09-27 Key fingerprint = A5C3 F68F 229D D60F 723E 6E13 8972 F4DF DC6D C026 To fetch my new key from a public key server, you can do: gpg --keyserver pgp.mit.edu --recv-key DC6DC026 If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs DC6DC026 If you don't already know my old key, or you just want to be double extra paranoid, you can check the fingerprint against the one above: gpg --fingerprint DC6DC026 If you are satisfied that you've got the right key, and the UIDs match what you expect, I'd appreciate it if you would sign my key: gpg --sign-key DC6DC026 Lastly, if you could upload these signatures, I would appreciate it. You can either send me an e-mail with the new signatures (if you have a functional MTA on your system): gpg --armor --export DC6DC026 | mail -s 'OpenPGP Signatures' kees@outflux.net Or you can just upload the signatures to a public keyserver directly: gpg --keyserver pgp.mit.edu --send-key DC6DC026 You can also find this signed message at: http://www.outflux.net/key-transition-2010-09-27-kees.txt Please let me know if there is any trouble, and sorry for the inconvenience. - -- Kees Cook -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Kees Cook iEYEARECAAYFAkyg7yUACgkQH/9LqRcGPm3sPwCgh5NV7IrMLpYpEnljCeLkpB+G IRMAnj+I2cpqm1IdzU7eKtjxuoc3GY3JiQIcBAEBCgAGBQJMoO8lAAoJEIly9N/c bcAmScMP/0e1/C5PCu+nBOI56TTAMh1xS346x8W6Xyfjt2LHFsEL8eRh9y2pGhQb NuPQdX6UbTQ+yQ1ZVWnQsDUuwE1GzZRaelYV6hfDC3J6TIVcxC6PJKKvxlMLhop4 I3puHoFCqVAUemAgdfPvNsmD6ww4Zo8zfTDjYxL35tg8Xu9rfebTDiXCKxdGcxbw tqE687beqo0F28i0Y2WD7bxQBldzRyOVmUTzYLBx9qnMGIyMMZX1la9ALlN5rng/ nIJNM//r21W7+hDb5YGKn2guC+FnHuHw/1inVgyMZMzorJzTIzqU/d3R94vWK8J+ SsVEggm02WxnpwnQXy/SWwfSDlCN+DMh7vbV8jRDjFaCHTi4q91uSBQ/D6p8WJlL N73vlme0DE+FpIO8MB1E3Q6dbreHKvG+A0XnZeETaImoRqxnVGeQFapFLD3bxj6R /lxs3vGtH/oyhiGPrvGXHIk1hLEjG7pvsgv+Rt8vfs9hkyv42BYVqKkQZQeGQ6/E kDVrdRCzz4wGN10Uci0WIxs/vqbmVDe3Ooi2E/euIxmtqIdxEZsTCQk2MA97Hwpz G7pcmvNaQobYbrXEoynUXmpcb7Fpka0lmqatdI8padhPBg6K5LkP61Q8V6RZL8i4 OgZcff8XT2KUTbKBcAm+/apcTb7p6xExvC6thkClMSu6tCDvMH32 =tmVu -----END PGP SIGNATURE-----