On 06/12/2020 09:24 PM, mpan wrote: >> On update today (yesterday's updates went fine), I am prompted to approve >> import of the following key a number of times: […] >> :: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) […] > Oh, “the heftig bug” ;). While Simon Wilper has provided the solution, > here is some background: > > “[…] I replaced it to get a clean break for a new key, which I'm > treating more securely from the beginning (no secret keys on the > laptop, just subkeys on a yubikey and the master key on a few > backups)” —heftig > > -Syu often to avoid problems. > Oh.... So there was a private key that escaped into the wild... That would be a big bug... Thank you for the background. I generally -Syu daily (at most every few days) -- which is why this event immediately jumped out as not normal. I hope he got the laptop back :p -- David C. Rankin, J.D.,P.E.
Attachment:
signature.asc
Description: OpenPGP digital signature
