Exit Zen
1
English type: Plain text
[[!meta date="Mon, 16 Mar 2015 12:34:56 +0000"]]
[[!meta date="Mon, 16 Mar 2015 12:34:56 +0000"]]
49/490 · 49
2
English type: Plain text
[[!pagetemplate template="news.tmpl"]]
[[!pagetemplate template="news.tmpl"]]
39/390 · 39
3
English type: Plain text
[[!meta title="Transition to a new OpenPGP signing key"]]
0/580 · 58
4
English type: Plain text
[[!tag announce]]
[[!tag announce]]
18/180 · 18
5
English type: Plain text
Tails is transitioning to a new OpenPGP signing key.
0/520 · 52
6
English type: Plain text
The signing key is the key that we use to:
0/420 · 42
7
English type: Bullet: ' - '
Sign our official ISO images.
0/290 · 29
8
English type: Bullet: ' - '
Certify the other [[OpenPGP keys|doc/about/openpgp_keys]] used by the project.
0/780 · 78
9
English type: Plain text
<div class="note">
<div class="note">
19/190 · 19
10
English type: Plain text
<p>The previous signing key is safe and, to the best of our knowledge, it
has not been compromised.</p>
0/1040 · 104
11
English type: Plain text
<p>We are doing this change to improve our security practices when
manipulating such a critical piece of data.</p>
0/1150 · 115
12
English type: Plain text
</div>
</div>
7/100 · 7
13
English type: Plain text
<div class="tip">
<div class="tip">
18/180 · 18
14
English type: Plain text
<ul>
<li>The old key can still be used to verify Tails 1.3 ISO images.</li>
<li>The new key will be used to sign ISO images starting from Tails 1.3.1.</li>
</ul>
0/1660 · 166
15
English type: Title =
Import and verify the new signing key
0/370 · 37
16
English type: Plain text
Click on the following button to download and import the new signing key:
0/730 · 73
17
English type: Plain text
<a class="download-key" href="https://tails.net/tails-signing.key">new Tails signing key</a>
0/930 · 93
18
English type: Plain text
The new signing key is itself signed by the old signing key. So you can transitively trust this new key if you had trusted the old signing key.
0/1430 · 143
19
English type: Plain text
To verify that the new key is correctly signed by the old key, you can execute the following command:
0/1010 · 101
20
English type: Plain text
gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F
0/620 · 62