Skip to content

Instantly share code, notes, and snippets.

@kmdm
Created January 3, 2019 14:08
Show Gist options
  • Save kmdm/1bfeef914f3168c214b05f06cbddbc15 to your computer and use it in GitHub Desktop.
Save kmdm/1bfeef914f3168c214b05f06cbddbc15 to your computer and use it in GitHub Desktop.
OpenPGP key transition statement 2019-01-03
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA512
OpenPGP Key Transition Statement for Kenny Millington
I have created a new OpenPGP key and will be transitioning away from
my old key. The old key has not been compromised and will continue to
be valid for some time, but I prefer all future correspondence to be
encrypted to the new key, and will be making signatures with the new
key going forward.
The new key uses better cryptographic settings and is better managed
with an offline secret master key and dedicated subkeys stored exclusively
on Yubikey devices.
The old key, which I am transitioning away from, is:
pub dsa1024 2008-08-03 [SC]
28A2 3A3A C7E3 3BD9 FF77 B0A1 6500 2563 ED89 0A5E
uid [ultimate] Kenny Millington <kmdm2@kennynet.co.uk>
sub elg2048 2008-08-03 [E]
The new key, to which I am transitioning, is:
pub rsa4096 2019-01-02 [C] [expires: 2020-01-02]
208E 1991 892B 02EA B2D3 333A FEF2 4F8F DAC5 7B1D
uid [ultimate] Kenny Millington <kenny@kennynet.co.uk>
uid [ultimate] [jpeg image of size 5566]
sub rsa4096 2019-01-02 [S] [expires: 2020-01-02]
sub rsa4096 2019-01-02 [E] [expires: 2020-01-02]
sub rsa4096 2019-01-02 [A] [expires: 2020-01-02]
The entire key may be downloaded from:
https://www.kennynet.co.uk/kenny_kennynet_co_uk.asc
To fetch the full new key from a public key server using GnuPG, run:
gpg --keyserver keys.gnupg.net --recv-key 208E1991892B02EAB2D3333AFEF24F8FDAC57B1D
If you already know my old key, you can now verify that the new key is
signed by the old one:
gpg --check-sigs 208E1991892B02EAB2D3333AFEF24F8FDAC57B1D
If you are satisfied that you've got the right key, and the User IDs
match what you expect, I would appreciate it if you would sign my key:
gpg --sign-key 208E1991892B02EAB2D3333AFEF24F8FDAC57B1D
You can upload your signatures to a public keyserver directly:
gpg --keyserver keys.gnupg.net --send-key 208E1991892B02EAB2D3333AFEF24F8FDAC57B1D
If you'd like any further verification or have any questions about the
transition please contact me directly.
To verify the integrity of this statement:
wget -q -O- https://www.kennynet.co.uk/key-transition-2019-01-03.txt | gpg --verify
- - Kenny
-----BEGIN PGP SIGNATURE-----
iHMEARECADMWIQQoojo6x+M72f93sKFlACVj7YkKXgUCXC4TlhUca21kbTJAa2Vu
bnluZXQuY28udWsACgkQZQAlY+2JCl4tLQCeI68B+6mHoifj2gqqsE2WNbdF3c8A
n359dl9U4BqTQ89Kyn9Nx2YaScvCiQJJBAEBCgAzFiEEvk0Ggm/VG9NDFZs3eJn/
FlRA/ZwFAlwuE5oVHGtlbm55QGtlbm55bmV0LmNvLnVrAAoJEHiZ/xZUQP2cLl8P
/0wvperxDhFlQIQCjdVHSEPJ+SAA2tjP74przxHgpJJM/QmHHusCFJ6tcGI+vp8D
9QYnL2cvfYBSh26Z6byvIpbN7hrij1gj0H8HftJAWpBvFdsgwl3PZVZ05Uy5/r4E
MSi61Sej4VFe1ZIYELUWLYwaGdeB/yUGv0Llpa/glNNJ7xdshWs5Uuf1FXdlksm4
Clzh6+feiSgRDS2NYzBYL/y2+4qeIgUr0LOpsELN08aoI7U9fEp3BE6WFe8e7WVW
GHrQuOHY1TMs+TectWy6sDtXUKBtQ8mB5KZRq8UsJvZabujuCtobTbaXhO87G5Dw
ZiPSqWGLWne5kGtNKf1XMm1PWxdT4PItdcHGEqPC+AKhj02MBtAhXmRmfNhcB/+f
qh5Dwc7yVx0B6s/ce4C33sQ704nyGH7yCSgvTFHiAYHThvYxkYwy5HjyfIe38hRG
pyRnFdMFTdMGNwt2DVkHYOpbEj6LZHHlZb+OsCvmMvG/eNPbbboIDE5CVdwYZHyc
eIdxYsZF5ULTiDJ/OekSI57GIUXNl020EApahCwkSLFfDMVW2hRX3AZZ2Logz/B8
klpYXlXrKn/1L+F6QdqgBaw/LXMAjh34KfT5OJns3xg/gO6uYBsXs3eZHSE1vZYb
JkFeWPQwvP6EvkS9rwtPgNKAgGVFGsHblKyhLXlrXnAw
=IT2p
-----END PGP SIGNATURE-----
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment