-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1,SHA512 I've recently set up a new RSA-based GPG key, and will be transitioning away from my old DSA-based one. The old key will continue to be valid for some time, but I prefer all future correspondence to use the new one. I would also like to ensure that this new key is well-integrated into the web of trust. This message is signed by both keys to certify the transition. The old DSA key was: pub 1024D/641323B1 2005-01-11 Key fingerprint = 49B2 86EB 0461 CEAC 2E34 7CC5 16AD 84C0 6413 23B1 The new RSA key is: pub 4096R/CD74159C 2009-07-31 Key fingerprint = 374F B4C7 14D0 BA7B AA4D 803A 23F6 61CE CD74 159C To fetch my new key from a public key server, you can run: gpg --keyserver subkeys.pgp.net --recv-keys CD74159C If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs CD74159C If you don't already know my old key, or if you're extra-paranoid, you can check the fingerprint against the one given above: gpg --fingerprint CD74159C If you have previously signed my old DSA key, and if you're satisfied that you've got the correct new RSA key, then I'd appreciate it if you would sign my new key as well: caff CD74159C The caff program is in the signing-party package in Debian and its derivatives, including Ubuntu. Please be careful to generate signatures that don't rely on the weakening SHA-1 hash algorithm, which requires some careful configuration even if you've already configured gpg correctly. See http://www.gag.com/bdale/blog/posts/Strong_Keys.html for the gory details. Thanks, - -- Jeremie Corbier -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkpz6HQACgkQFq2EwGQTI7HZawCfbLfYE3aR2jIVnloiCh9V+He3 aqkAni9E1Ug56eakFCvuEvAxZJUPErsoiQIcBAEBCgAGBQJKc+h0AAoJECP2Yc7N dBWcmZAP/j9fkg5Z4Fim9T55IwTpXSfUaOUCISckkqTY0d9Ms0UbFWZ2RUXwQePL oGm1NdvraXvEIhiVCzItS3xiCPNtkREFvsJPBfuLRzEi5/vj94+I9uD+kmnMyeEK KNmSFu1MpyQZBqgD+cntKFXYSub16FMF6z0v1Y5+API6dWULS4wUKY7EeJO6AoqK FMRAJWF68AmE4VOOpcUC/3V66RvUsgQnMPhCPdkyOgBjigkh51Cj/wDW3xZlig+b CHylo5yQgQ4wlgOJZW6HlaWQ8k45pnoPbSGzqEQWeLksCX0TV13C7zsylhrFlWYT 44SGnayWVK0TIRi+Ku7RoCOMhi6blMBrEkkarLrf+hzbsExHxnN5BFUMBWD7h5Hg PxFAFlQAhqq431uaZ2oNGVi1ksQy+NYR/DiytFgvhMAvqL7DBzscsEpf0qCW71T2 FflNi7skktgLPXyRMf+T8xOozZa23djpPoYLqnXAwUG5OparxUY+0OpeOmyScELw TQ3hQYxF4Nryn51ucMKiWrpRM0kvog0EwPeoBDcEJrC49F45af/DdLaIL+arZSuX F+iNYn+oUD/MIPyqLqQCOhwam1+ylBUV24UzKM4LEV4ZktKb9KafsqiF/ajtbpMx pID+fIC4L9WCXJ7b7LVc4xI9JVEwxMJaokm2xPrcJoL+kOVM/NsA =aG6B -----END PGP SIGNATURE-----