Re: [Tails-dev] Updated signing key - lack of notice on d/l page for 1.7
kytv: > On Sat, Nov 07, 2015 at 09:23:40AM +, Anonymous wrote: >> on your TAILS download page it mentions: >> >> "Tails transitioned to a new signing key in Tails 1.3.1." >> >> But it fails to mention the new updated signing key for 1.7. >> I verified the 1.7 ISO with an older version of TAILS and >> followed this by importing the 1.7 signing key and it too >> verified the 1.7 ISO. >> >> But, you should post somewhere about the new 1.7 signing key >> and recommend the download of it just in case for some >> users. TIA > > I believe you are mistaken. If there was a new signing key it would definitely > have been mentioned. There isn't a new signing key for 1.7. Indeed. What the "Update the Tails signing key" entry in the changelog refers to is simply that we bumped the expiry date of two subkeys. Cheers! ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Updated signing key - lack of notice on d/l page for 1.7
On Sat, Nov 07, 2015 at 09:23:40AM +, Anonymous wrote: > on your TAILS download page it mentions: > > "Tails transitioned to a new signing key in Tails 1.3.1." > > But it fails to mention the new updated signing key for 1.7. > I verified the 1.7 ISO with an older version of TAILS and > followed this by importing the 1.7 signing key and it too > verified the 1.7 ISO. > > But, you should post somewhere about the new 1.7 signing key > and recommend the download of it just in case for some > users. TIA I believe you are mistaken. If there was a new signing key it would definitely have been mentioned. There isn't a new signing key for 1.7. ╰$ gpg --verify tails-i386-1.7.iso.sig tails-i386-1.7.iso gpg: Signature made 2015-11-03T03:29:43 UTC gpg:using RSA key 0x98FEC6BC752A3DB6 ← gpg: Good signature from "Tails developers (offline long-term identity key) " gpg: aka "Tails developers " ╰$ gpg -k 0x98FEC6BC752A3DB6 pub 4096R/0xDBB802B258ACD84F 2015-01-18 [expires: 2017-01-11] uidTails developers (offline long-term identity key) uidTails developers sub 4096R/0x98FEC6BC752A3DB6 2015-01-18 [expires: 2017-01-11] ← sub 4096R/0x3C83DCB52F699C56 2015-01-18 [expires: 2017-01-11] sub 4096R/0xAA9E014656987A65 2015-01-18 [expires: 2016-01-11] That is the key which was transitioned to for 1.3.1. (https://tails.boum.org/news/signing_key_transition/index.en.html) Or am I missing something? ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
[Tails-dev] Updated signing key - lack of notice on d/l page for 1.7
on your TAILS download page it mentions: "Tails transitioned to a new signing key in Tails 1.3.1." But it fails to mention the new updated signing key for 1.7. I verified the 1.7 ISO with an older version of TAILS and followed this by importing the 1.7 signing key and it too verified the 1.7 ISO. But, you should post somewhere about the new 1.7 signing key and recommend the download of it just in case for some users. TIA ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.