Re: pgp keys for signing releases

2016-04-28 Thread Stefan Hett
Hi, Not entirely sure, but I think you should still publish your pgp key to the major key stores. Once you put your fingerprint on id.apache.org, it knows how to fetch your key from there. Yep did that and it seems to have worked. So I take it I'm all fine here. :-) *From: *Stefan

RE: pgp keys for signing releases

2016-04-27 Thread Bert Huijben
Not entirely sure, but I think you should still publish your pgp key to the major key stores. Once you put your fingerprint on id.apache.org, it knows how to fetch your key from there. Bert Sent from Mail for Windows 10 From: Stefan Sent: donderdag 28 april 2016 01:15 To: dev@subversion.apache

Re: PGP Keys

2012-11-03 Thread Ben Reser
On Mon, Oct 29, 2012 at 1:41 PM, Ben Reser wrote: > This is coming up next week. FYI there is already a key signing event > scheduled as part of ApacheCon per the email they sent out earlier: > > [[[ > - Welcome Reception (Tuesday 6 November at 18:30) > - PGP Keysigning (Tuesday 6 November at the

Re: PGP Keys

2012-10-29 Thread Ben Reser
On Fri, Oct 5, 2012 at 3:10 PM, Ben Reser wrote: > b) Sinsheim, Germany November 5th - 8th at ApacheCon EU 2012. > > I plan on organizing key signing at both events if there is sufficient > people interested and there will be keys that need signing. Given the > issue the SHA-1 issue described a

Re: PGP Keys

2012-10-23 Thread Ben Reser
On Fri, Oct 5, 2012 at 5:10 PM, Ben Reser wrote: > Given that we're coming up on a couple of opportunities for various > developers to get together an potentially sign keys I thought I'd > bring this subject up. > > 1) SHA-1 based keys should be migrated off of. The US Government's > requirement

Re: PGP Keys

2012-10-10 Thread Ben Reser
On Wed, Oct 10, 2012 at 8:27 PM, Julian Foad wrote: > Ben Reser wrote: > >> Those interested in taking part you'll want to bring with you your >> keyid/fingerprint/uid information. > > Here are my keys. The new (4096R) key has just been generated, signed by the > old key and uploaded to key serv

Re: PGP Keys

2012-10-10 Thread Julian Foad
Ben Reser wrote: > Those interested in taking part you'll want to bring with you your > keyid/fingerprint/uid information. Here are my keys.  The new (4096R) key has just been generated, signed by the old key and uploaded to key servers subkeys.pgp.net and keys.gnupg.net.  I'm working through t

Re: PGP Keys

2012-10-09 Thread Ben Reser
Those interested in taking part you'll want to bring with you your keyid/fingerprint/uid information. E.G. $ gpg --fingerprint 16A0DE01 pub 4096R/16A0DE01 2011-01-28 Key fingerprint = 19BB CAEF 7B19 B280 A0E2 175E 62D4 8FAD 16A0 DE01 uid Ben Reser uid B

Re: PGP Keys

2012-10-08 Thread Ben Reser
On Mon, Oct 8, 2012 at 5:47 PM, Branko Čibej wrote: > P.S.: I wonder if I should "upgrade" my 2kbit/SHA512 RSA key to 4kbit? I don't think there's any particular need to do that at this point. I used a 4096 key size because I figured it might give me a little more life out of this key.

Re: PGP Keys

2012-10-08 Thread Julian Foad
Hyrum K Wright wrote: > Ben Reser wrote: >> I'd like to plan the details for the Greenwich, Connecticut >> opportunity no later than Tuesday October 8th, so please reply ASAP if >> you're interested in that.  I'll post more details once I've >> figured them out. > > I am interested in partic

Re: PGP Keys

2012-10-08 Thread Ben Reser
On Mon, Oct 8, 2012 at 5:12 PM, Hyrum K Wright wrote: > I am interested in participating in the keysigning in Greenwich. > Though I will note that October 8th is a Monday this year, not a > Tuesday. :) I meant tomorrow Tuesday October 9th. Sorry for the typo and confusion.

Re: PGP Keys

2012-10-08 Thread Branko Čibej
On 06.10.2012 00:10, Ben Reser wrote: > I plan on organizing key signing at both events if there is sufficient > people interested and there will be keys that need signing. Given the > issue the SHA-1 issue described above and the key signing party > options. Now might be a excellent time to gene

Re: PGP Keys

2012-10-08 Thread Hyrum K Wright
On Fri, Oct 5, 2012 at 6:10 PM, Ben Reser wrote: > Given that we're coming up on a couple of opportunities for various > developers to get together an potentially sign keys I thought I'd > bring this subject up. > > 1) SHA-1 based keys should be migrated off of. The US Government's > requirement