On Tue, 17 Dec 2013, Daniel Kahn Gillmor wrote: > On Thu 2013-12-12 21:56:33 -0500, Damien Miller wrote: > > I'm rotating my PGP keys, so this is a forewarning that the key used to > > sign the next release of portable OpenSSH will be different to the one > > I've used in the past. > > Thanks for the heads-up, Damien, and thanks for doing this boring > maintenance work and announcing it clearly ahead of time. > > I note that some of the OpenSSH mirrors have DJM-GPG-KEY.asc, which i > think is the old one. e.g. > > http://mirrors.nycbug.org/pub/OpenBSD/OpenSSH/portable/DJM-GPG-KEY.asc > > Maybe you could update the key on the mirrors too when you get a chance. I was going to leave that one there until I make a release signed with the new key. Otherwise, people who get the key for the first time ahead of the release will see "key superseded" deprecation warnings. -d
