This feed contains pages in the “gpg” category.

New GPG Key

I’m assuming everybody (everybody who cares, that is) has heard about the attack against SHA-1. Part of what this means is that 1024-bit DSA GnuPG keys are vulnerable; accordingly, I’m replacing mine.

The new key is as follows:

pub   4096R/166891C7 2009-05-07 [expires: 2010-05-07]
      Key fingerprint = B62D 05AE 65F4 DAFD DE2E  10E2 ABAE 113A 1668 91C7
uid                  Benjamin M. A'Lee <bma@subvert.org.uk>

My old key will expire in 90 days (or I’ll revoke it, one or the other). I’ll see about getting the new key signed (and resigning other people’s keys) at some point.