Exit Zen
1
English type: Plain text
[[!meta title="OpenPGP keys"]]
41/310 · 31
2
English type: Plain text
Tails developers maintain several OpenPGP key pairs.
66/520 · 52
4
English type: Plain text
<p>Make sure to verify the keys that you download, because there are
several fake and maybe malicious Tails keys on the key servers.</p>
157/1370 · 137
5
English type: Plain text
<p>For example, if you first [[authenticate the Tails signing key
through the OpenPGP Web of Trust|install/download#wot]], then
you can verify our others keys as they are all certified by the Tails
signing key.</p>
257/2150 · 215
9
English type: Title =
Signing key
16/110 · 11
10
English type: Title -
Purpose
11/100 · 7
11
English type: Plain text
This key only has the capability to sign and certify: it has no encryption subkey.
103/820 · 82
12
English type: Plain text
Its only purpose is:
18/200 · 20
15
English type: Title -
Policy
15/100 · 6
16
English type: Plain text
The secret key material will never be stored on an online server or on systems managed by anyone other than Tails core developers.
145/1300 · 130
17
English type: Title ###
Primary key
12/110 · 11
19
English type: Bullet: '- '
Is only used offline, in an air-gapped Tails only communicating with the outside world through:
129/950 · 95
20
English type: Bullet: ' * '
Plugging the Tails flash media in another operating system to install Tails in the first place.
111/950 · 95
21
English type: Bullet: ' * '
Plugging other removable media in the air-gapped Tails to send the public key, secret key stubs, parts of the secret master key, and so on to the outside world.
207/1600 · 160
22
English type: Bullet: ' * '
Plugging other removable media in the air-gapped Tails to receive Debian packages, public keys, and so on from the outside world.
165/1290 · 129
23
English type: Bullet: '- '
Expires in less than one year. We will extend its validity as many times as we find reasonable.
104/950 · 95
24
English type: Bullet: '- '
Has a revocation certificate split amongst different people. See the [[details of the mechanism|signing_key_revocation]].
135/1220 · 122
25
English type: Title ###
Signing subkeys
22/150 · 15
26
English type: Bullet: '- '
Stored on OpenPGP smartcards owned by those who need them. Smartcards ensure that the cryptographic operations are done on the smartcard itself and that the secret cryptographic material is not directly available to the operating system using it.
296/2470 · 247
28
English type: Title -
Key details
17/110 · 11