-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512,SHA1 Fri Sep 17 21:53:45 CEST 2010 I've recently set up a stronger (3072R) OpenPGP key, and will be transitioning away from my old (1024D) one. The old key will continue to be valid for some time, but i prefer all future correspondence to come to the new one. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition. The old key was: pub 1024D/237E9DB2 2008-03-28 Key fingerprint = 222E E2E6 53A6 2ADC FABB A245 A65F FD39 237E 9DB2 And the new key is: pub 3072R/0661CBBA 2010-09-17 Key fingerprint = 9BD4 9BDC C1EF 44D6 DAD0 4B32 D94E CFFE 0661 CBBA To fetch my new key from a public key server, you can simply do: gpg --keyserver pgp.mit.edu --recv-key 0661CBBA If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs 0661CBBA If you don't already know my old key, or you just want to be double extra paranoid, you can check the fingerprint against the one above: gpg --fingerprint 0661CBBA If you are satisfied that you've got the right key, and the UIDs match what you expect, I'd appreciate it if you would sign my key: gpg --sign-key 0661CBBA Lastly, if you could upload these signatures, i would appreciate it. You can either send me an e-mail with the new signatures (if you have a functional MTA on your system): gpg --armor --export 0661CBBA | mail -s 'Sig' christophe@brocas.org Or you can just upload the signatures to a public keyserver directly: gpg --keyserver pgp.mit.edu --send-key 0661CBBA Thanks :) Christophe -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQGcBAEBCgAGBQJMk82nAAoJENlOz/4GYcu6W78MAI0Pv4DtktFSx0qDJPLuD8v2 ShixK0vfrxcBNyaoH1Yle2LfMYl+3VObLH/gm9Krnyq0vwIFRpk+ct4+UMe2quLW 17tLEo35ELjpVrICejlDQNmDPDpn8tQWAhQ/C+iB52O1uMZfkUBaIscW3gsLZvRv 2+5XGUxxXV1uZP/xHiVzpb47PiX7pkPwkthQsUHn5enNuZdSL6+MHSV54eoI1ChY 00eAdnwwZfc2PADNsUDYZvZ3DRzk6w/8R/e/VimtGrKldyXZqTpf5vm6/eWvI+1W nmvoj/Qh5ch0LlWbqZ8k3Vxv+Oa8iAecrSDlEAz/voyG898jTaw+mn2tDJIozgQk g0oEMdh9wSQHIph0ADN00SYVLDIXl145+0tazMvCKUitx/OH3b0Fgk5P5xKDta93 TiTZItaDBT3m34NXNg9Ck5K3YEWiL2DR0bL9E6Gop0pzeXXWHAg89MePTLIx1uhy 8B9tFzmGVQqkb4f4cwxvNZMScCHpq9Ij8xko76R4wohGBAERAgAGBQJMk82nAAoJ EKZf/Tkjfp2yvyoAn0beBMEqnMZfFwdeBvJfT0/gzSnMAKCBCg6igrc4pvmgDMtO Oz3H0tEt6A== =Osp8 -----END PGP SIGNATURE-----