On Sat, Nov 07, 2015 at 09:23:40AM +0000, Anonymous wrote:
> on your TAILS download page it mentions:
> 
> "Tails transitioned to a new signing key in Tails 1.3.1."
> 
> But it fails to mention the new updated signing key for 1.7.
> I verified the 1.7 ISO with an older version of TAILS and
> followed this by importing the 1.7 signing key and it too
> verified the 1.7 ISO.
> 
> But, you should post somewhere about the new 1.7 signing key
> and recommend the download of it just in case for some
> users. TIA

I believe you are mistaken. If there was a new signing key it would definitely
have been mentioned. There isn't a new signing key for 1.7.

╰$ gpg --verify tails-i386-1.7.iso.sig tails-i386-1.7.iso
gpg: Signature made 2015-11-03T03:29:43 UTC
gpg:                using RSA key 0x98FEC6BC752A3DB6  ←
gpg: Good signature from "Tails developers (offline long-term identity key) 
<ta...@boum.org>"
gpg:                 aka "Tails developers <ta...@boum.org>"


╰$ gpg -k 0x98FEC6BC752A3DB6
pub   4096R/0xDBB802B258ACD84F 2015-01-18 [expires: 2017-01-11]
uid                            Tails developers (offline long-term identity 
key) <ta...@boum.org>
uid                            Tails developers <ta...@boum.org>
sub   4096R/0x98FEC6BC752A3DB6 2015-01-18 [expires: 2017-01-11] ←
sub   4096R/0x3C83DCB52F699C56 2015-01-18 [expires: 2017-01-11]
sub   4096R/0xAA9E014656987A65 2015-01-18 [expires: 2016-01-11]

That is the key which was transitioned to for 1.3.1.
(https://tails.boum.org/news/signing_key_transition/index.en.html)

Or am I missing something?
_______________________________________________
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Reply via email to