-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fri, 15 Jun 2007 13:06:43 -0400 For a number of reasons, i've recently set up a new OpenPGP key, and will be transitioning away from my old one. The old key will continue to be valid for some time, but i prefer all future correspondence to come to the new one. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition. the old key was: pub 1024D/A54B6365 1999-12-09 Key fingerprint = B599 41F7 41EA EAF8 726F 45D8 8974 E514 A54B 6365 And the new key is: pub 4096R/D21739E9 2007-06-02 [expires: 2012-05-31] Key fingerprint = 0EE5 BE97 9282 D80B 9F75 40F1 CCD2 ED94 D217 39E9 To fetch the full key (including a photo uid, which is commonly stripped by public keyservers), you can get it with: wget -q -O- http://www.fifthhorseman.net/dkg.gpg | gpg --import - Or, to fetch my new key from a public key server, you can simply do: gpg --keyserver pgp.mit.edu --recv-key D21739E9 If you already know my old key, you can now verify that the new key is signed by the old one: gpg --check-sigs D21739E9 If you don't already know my old key, or you just want to be double extra paranoid, you can check the fingerprint against the one above: gpg --fingerprint D21739E9 If you are satisfied that you've got the right key, and the UIDs match what you expect, I'd appreciate it if you would sign my key: gpg --sign-key D21739E9 Lastly, if you could upload these signatures, i would appreciate it. You can either send me an e-mail with the new signatures (if you have a functional MTA on your system): gpg --armor --export D21739E9 | mail -s 'OpenPGP Signatures' dkg@fifthhorseman.net Or you can just upload the signatures to a public keyserver directly: gpg --keyserver pgp.mit.edu --send-key D21739E9 Please let me know if there is any trouble, and sorry for the inconvenience. Regards, --dkg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQIVAwUBRnLJrczS7ZTSFznpAQL/qw/9Fy6t+bEQdUDlUUQgsB99cTDfM6T/Cfar bvuLW7dzCRbnbc2q0vx/gUdwhjzxg7bDvhSxKb625y0iiuTodaUc/urOZJxt6oXL JGO0q7CcLFw90sNu93CvafwWd6l9zXzSWX2vKMpW/wqSp5WyXGWGRcneeEFb9Rp1 ehItZOMZ3dJimxDJW8+neDoeRM0/mxpw0Zj/QMxLilZj/uIfW2TuPlg8lrS7GSWM RIabTyhqGJfAj0lAZj0GzuGBKJuhpAdn+iO+jkXxdWeQiu35PWfc6CzVJ8p9w3Ex XpnX34Em/9f4yRiUTzHT13YhwWq0p3sQqy2nYF0t5REHvDceKo/0zIpFFC+Ellft OkkBdsfm5tF3NWQv58hjW7/BBcFn3Ov51um1/fZ6Hav+gdIIDpslX1g69ECsE88K Pb5u+XnfQBORQf2T8DJbc1iVJ1IEReHSR27jyt3tUhMnvGMjixYONRTP02gk66Vd abmn5p43NdoCjH1rDnClOVU8bqhFM1wDRsdr/Pob4EZw6zXX9Geadix/nPNVJbSE V9uLZkaPH+YZF4meIH95QKVveVazf1lT7hJc/XfESU7ubU9yom4TVm/UvzmkI+tR +/5iFtWgur6a5auCwwTrNDoeB3wW4OtdOOdGv38ui6pdKbWU3OA+NskfZnfycVh4 2mr/dcPfaz2IPwMFAUZyya6JdOUUpUtjZRECq50AoPYopv8JuL1pTQr7nWsiBhnH pEDVAKD2UfkdnwK7COlldc2cax3U8JLKag== =0XPF -----END PGP SIGNATURE-----