OpenPGP key transition
Monday, August 30th, 2010I recently decided, in advance of any future events I may attend, to join the bandwagon and transition away from my old 1024D key (20BFCDC7) to a lovely new 4096R key (1C5041D4). This post is my transition announcement. You can find the transition document here, and below. Both keys will still be valid for the time being, but I shall not be renewing the old one after it expires on 2010-11-26, and it will be revoked shortly thereafter. As far as possible, I'd appreciate all correspondence to use the new key.
If, after reading the transition document, you feel comfortable signing my key (and have signed the old one), then I'd appreciate your signature via email.
(format of transition document cribbed from Matt Zimmerman's transition, thanks!)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1,SHA256 ,----[ OpenPGP key transition ] | Time-stamp: <2010-08-30 00:08:28 laney> `---- I've recently set up a new GPG key, and will be transitioning away from my old one. I have done this in order to migrate to a larger RSA key and stronger hash functions, and NOT due to any known key compromise. The old key will continue to be valid for some time, but future correspondence should use the new one wherever possible. This message is signed by both keys to certify the transition. The old key was: pub 1024D/20BFCDC7 2007-11-27 Key fingerprint = 2B1E 742E B9CA C441 EA0B 4CBA 3F2D 129C 20BF CDC7 uid Iain Lane <iain@orangesquash.org.uk> uid Iain Lane <laney@ubuntu.com> uid Iain Lane <ial@cs.nott.ac.uk> uid Iain Lane <psxil@nottingham.ac.uk> sub 2048g/5D64CB7D 2007-11-27 [expires: 2010-11-26] and the new key is: pub 4096R/1C5041D4 2010-08-29 [expires: 2013-08-28] Key fingerprint = 3D0E FB95 E7B5 237F 16E8 2258 E352 D5C5 1C50 41D4 uid Iain Lane <iain@orangesquash.org.uk> uid Iain Lane <psxil@nottingham.ac.uk> uid Iain Lane <laney@ubuntu.com> uid Iain Lane <ial@cs.nott.ac.uk> sub 4096R/8FB24134 2010-08-29 [expires: 2013-08-28] To fetch my new key from a public keyserver, you can run: gpg --keyserver pgp.mit.edu --recv-keys 1C5041D4 and verify its fingerprint matches the one above: gpg --fingerprint 1C5041D4 If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs 1C5041D4 If you have previously signed my old key, and you're satisfied that you've got the correct new key, then I'd appreciate it if you would sign my new key as well: gpg --sign-key 1C5041D4 Then I would appreciate it if you would mail me the signed key. A lot of people like to use caff(1) to sign keys. Thanks, Iain Lane -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkx66HUACgkQPy0SnCC/zccWmwCfXgHVQkIAwjwgSosANYdaCcTd LoUAn1Emf+obkXmW40qjs7PSDlMv2rN8iQIcBAEBCAAGBQJMeuh1AAoJEONS1cUc UEHUqTsQALTBe1wAtZ/8StNo7GwMgnFUTmfmgyGG5sX6I3d8N2vUOhQ3uKYMLrxE 5JrtpG06DyTjU4woVDoCkUGtatIVhkaY7Q/U04l/t6w1wC+lfP+EGos117JYtzc4 rFDttJHlo2CzIz695Gk5T+4JRax1VBF8PEQgVqvwMHKG5C+L87QtqDgLFZ1vElQK qIFIokU7Gfo3tNXQB9uwQlgN4m46nfL/j8FcqWYNOBD5SiB0A78zuDljHKHtGiEi AYFRjHZA2mha3xePCqOc7uC8dO9Lyqn9RK9bbcFgbW+G3M8o7ZQd/0a5SQifBMp6 8IyFdRuPHIdAF9YcBMaW1cf+ioEL9OIHTMmq3vmGVJIRjwzTtbl/CXaBCAdMvJeh SlPnm256/wTUkc2np9erJQ9JwfRB84neT3XVd3HE7AdTuMd9E3BTY2Lqav3YI8kI rVMPD5Yi0tXMfz6dUSU9hKg0ttiklkY9whtSf4sTKvsyw+ZM5apFFK/a0aXaitUA A0xP7SSc4g5vXd3YBm5JvO4DEFcmuk+lRLSxUy4g7rWWB3hdwwI6jgb9+b7TTHBC vW4eH4wG7JH4/rIlIwLndQqkbzkY+FMzHfWvMf/xwKCjeHfKF4iw96kUHahu/arR d2vzHUdiWpQwhsb15EkNcS5De5vE/vjgHHehkmuZwmhjyIzQNNyC =woWY -----END PGP SIGNATURE-----







