Comments on: PGP/GPG transition 8CA99047 -> 29C0FFEE *

By: Amir

Amir — Thu, 21 May 2009 12:09:45 +0000

Neat! Now you should invite 28 friends for coffee and drink for the new web of trust while signing each other’s new keys.

By: Obey Arthur Liu

Obey Arthur Liu — Tue, 19 May 2009 19:03:50 +0000

Depends, but the entropy issue is easy to bypass, without losing security.

By: .

Tue, 19 May 2009 15:08:18 +0000

Is the computing power the main limitation or the entropy? It always looked to me like the main problem ist the latter.

By: Obey Arthur Liu

Obey Arthur Liu — Tue, 19 May 2009 14:39:43 +0000

This particular key was generated on a cluster placed in my bedroom, under my sole control. Don’t worry

By: Obey Arthur Liu

Obey Arthur Liu — Tue, 19 May 2009 14:38:39 +0000

Of course, I’m the only root on stacks computers on computers in my bedroom.

By: Simon McVittie

Simon McVittie — Tue, 19 May 2009 12:48:05 +0000

So, er, before your GPG key was published or used anywhere, it had already been present on machines outside your direct control? I don’t think that’s an example of the sort of good key management that Debian relies on.

By: garden

garden — Tue, 19 May 2009 12:17:28 +0000

Were you the only one with root access on those clusters?