Skip to content

Instantly share code, notes, and snippets.

@felmey
Last active December 29, 2015 00:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save felmey/6e76ac5823e0c3df48f2 to your computer and use it in GitHub Desktop.
Save felmey/6e76ac5823e0c3df48f2 to your computer and use it in GitHub Desktop.
OpenPGP Key Transition Statement for Robert Felmey
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA256
OpenPGP Key Transition Statement for Robert Felmey
I have created a new OpenPGP key and will be transitioning away from
my old key. The old key has not been compromised and will continue to
be valid for some time, but I prefer all future correspondence to be
encrypted to the new key, and will be making signatures with the new
key going forward.
I would like this new key to be re-integrated into the web of trust.
This message is signed by both keys to certify the transition. My new
and old keys are signed by each other. If you have signed my old key,
I would appreciate signatures on my new key as well, provided that
your signing policy permits that without re-authenticating me.
The old key, which I am transitioning away from, is:
pub 1024D/0x61AD5AA6912E532A 2009-07-19
Key fingerprint = EF05 8FBF F718 7D36 880F 5099 61AD 5AA6 912E 532A
The new key, to which I am transitioning, is:
pub 4096R/0x3670561CC398E91A 2015-12-26
Key fingerprint = B9EC 85C3 CE68 2759 ECD1 FE37 3670 561C C398 E91A
The entire key may be downloaded from: https://gist.github.com/felmey/5faac73e7ed94eb83a6d
To fetch the full new key from a public key server using GnuPG, run:
gpg --keyserver keys.gnupg.net --recv-key 0x3670561CC398E91A
If you already know my old key, you can now verify that the new key is
signed by the old one:
gpg --check-sigs 0x3670561CC398E91A
If you are satisfied that you've got the right key, and the User IDs
match what you expect, I would appreciate it if you would sign my key:
gpg --sign-key 0x3670561CC398E91A
You can upload your signatures to a public keyserver directly:
gpg --keyserver keys.gnupg.net --send-key 0x3670561CC398E91A
If you'd like any further verification or have any questions about the
transition please contact me directly.
To verify the integrity of this statement:
wget -q -O- https://gist.github.com/felmey/6e76ac5823e0c3df48f2 |gpg --verify
/Robert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlaB1D0ACgkQYa1appEuUyqkuwCZAUtEhQ2H9kqv96LUxnVvQ5E1
lfcAn2gvzrvBdYqSck+i1NJBs3S5xMtAiQEcBAEBCAAGBQJWgdQ9AAoJEP82sUZ9
oaqgnGMIAJ4cpqo3FlKv5iRjLWxYOvOvz+iRe0X9eOyeU+GbJOtiqcD1HwRRHL11
+Sh8N98B6EwQiaygeITerOB9/wH4sPTnp9KoJ8ilN6w+Rr9EvHYcqT9xG6uX3Lss
Hz2V7BRk2ou3EvGPv3Z9WoTPpRyCmDO7QEh5Kd/zxvzacu/Vl+P4HapRZdYYupWb
9oShWcqB16EhPZHIVvnJ4HEZfw6CcZZKVqqCEy8p1vd6aViEGKZP9dB4PsCID95o
x2M4XzuOhpQtDLyiI3e8YbX0jUt81LeG4gj6tBIYq63Wl69Xlvpz+pqx/ZmuXwXO
B7WCDxB7LRqyXIQNJL/xH3LdPz3tFkE=
=9zHU
-----END PGP SIGNATURE-----
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment