Thread: [Mixmaster-devel] New Mixmaster release signing key required
Brought to you by:
weaselp
From: Colin T. <co...@tu...> - 2012-06-12 16:34:20
|
Hi all, Zax and I have started doing some updates with a view to putting out a new Mixmaster release. There are several minor bug fixes and updates to things like the pingers list that make a release worthwhile. However there is a minor problem. The release signing key: 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key has expired. That key was held by Len Sassaman who died last year. If nobody objects then I will create a new key and ask those that know me to sign it. Comments and suggestions please. Colin -- Colin Tuckley | +44(0)1223 830814 | PGP/GnuPG Key Id Debian Developer | +44(0)7799 143369 | 0x1B3045CE Christmas comes, but once a year is enough. |
From: Colin T. <co...@tu...> - 2012-06-12 17:44:51
|
Hi all, Zax and I have started doing some updates with a view to putting out a new Mixmaster release. There are several minor bug fixes and updates to things like the pingers list that make a release worthwhile. However there is a minor problem. The release signing key: 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key has expired. That key was held by Len Sassaman who died last year. If nobody objects then I will create a new key and ask those that know me to sign it. Comments and suggestions please. Colin -- Colin Tuckley | +44(0)1223 830814 | PGP/GnuPG Key Id Debian Developer | +44(0)7799 143369 | 0x1B3045CE Christmas comes, but once a year is enough. |
From: Lance C. <lo...@ob...> - 2012-06-12 21:15:27
|
I have generated or signed most of the keys over the years. It is worth some thought on how best to manage these keys to prevent another loss of continuity. -- Lance Cottrell Sent from my iPad On Jun 12, 2012, at 9:34 AM, Colin Tuckley <co...@tu...> wrote: > Hi all, > > Zax and I have started doing some updates with a view to putting out a > new Mixmaster release. There are several minor bug fixes and updates to > things like the pingers list that make a release worthwhile. > > However there is a minor problem. The release signing key: > > 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key > > has expired. That key was held by Len Sassaman who died last year. > > If nobody objects then I will create a new key and ask those that know > me to sign it. > > Comments and suggestions please. > > Colin > > -- > Colin Tuckley | +44(0)1223 830814 | PGP/GnuPG Key Id > Debian Developer | +44(0)7799 143369 | 0x1B3045CE > > Christmas comes, but once a year is enough. > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Mixmaster-devel mailing list > Mix...@li... > https://lists.sourceforge.net/lists/listinfo/mixmaster-devel |
From: Benjamin K. <ben...@gm...> - 2012-06-12 21:30:44
Attachments:
signature.asc
|
On Tue, 12 Jun 2012 13:58:07 -0700 Lance Cottrell <lo...@ob...> wrote: > I have generated or signed most of the keys over the years. It is > worth some thought on how best to manage these keys to prevent > another loss of continuity. Can we use a secret sharing system? Say, one person who has the signing key, and three shares required to compute that secret key should that one person pass? Or, if anyone knows a well-developed threshold signature system for PGP, we could use that. -- Ben > -- > Lance Cottrell > Sent from my iPad > > On Jun 12, 2012, at 9:34 AM, Colin Tuckley <co...@tu...> wrote: > > > Hi all, > > > > Zax and I have started doing some updates with a view to putting > > out a new Mixmaster release. There are several minor bug fixes and > > updates to things like the pingers list that make a release > > worthwhile. > > > > However there is a minor problem. The release signing key: > > > > 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key > > > > has expired. That key was held by Len Sassaman who died last year. > > > > If nobody objects then I will create a new key and ask those that > > know me to sign it. > > > > Comments and suggestions please. > > > > Colin > > > > -- > > Colin Tuckley | +44(0)1223 830814 | PGP/GnuPG Key Id > > Debian Developer | +44(0)7799 143369 | 0x1B3045CE > > > > Christmas comes, but once a year is enough. > > > > ------------------------------------------------------------------------------ > > Live Security Virtual Conference > > Exclusive live event will cover all the ways today's security and > > threat landscape has changed and how IT managers can respond. > > Discussions will include endpoint security, mobile security and the > > latest in malware threats. > > http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > > _______________________________________________ Mixmaster-devel > > mailing list Mix...@li... > > https://lists.sourceforge.net/lists/listinfo/mixmaster-devel > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. > Discussions will include endpoint security, mobile security and the > latest in malware threats. > http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ Mixmaster-devel > mailing list Mix...@li... > https://lists.sourceforge.net/lists/listinfo/mixmaster-devel -- Benjamin R Kreuter UVA Computer Science br...@vi... KK4FJZ -- "If large numbers of people are interested in freedom of speech, there will be freedom of speech, even if the law forbids it; if public opinion is sluggish, inconvenient minorities will be persecuted, even if laws exist to protect them." - George Orwell |
From: Lucky G. <sha...@cy...> - 2012-09-10 01:41:58
|
On 2012-06-12 09:34, Colin Tuckley wrote: > Hi all, > > Zax and I have started doing some updates with a view to putting out a > new Mixmaster release. There are several minor bug fixes and updates to > things like the pingers list that make a release worthwhile. > > However there is a minor problem. The release signing key: > > 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key > > has expired. That key was held by Len Sassaman who died last year. Which goes to show the importance of only generating project PGP keys with expiration dates. At least that way key rotation becomes a necessity and no keys unusable due to loss of the private key get stuck in the system indefinitely. --Lucky |
From: Lance C. <lo...@ob...> - 2012-09-10 14:13:59
|
I would be happy to create a new key, or act as a signer for a new key. -Lance On 2012-06-12 09:34, Colin Tuckley wrote: > Hi all, > > Zax and I have started doing some updates with a view to putting out a > new Mixmaster release. There are several minor bug fixes and updates to > things like the pingers list that make a release worthwhile. > > However there is a minor problem. The release signing key: > > 2048R/2993D5F9 2007-07-03 Mixmaster 3.x Code Release Signing Key > > has expired. That key was held by Len Sassaman who died last year. Which goes to show the importance of only generating project PGP keys with expiration dates. At least that way key rotation becomes a necessity and no keys unusable due to loss of the private key get stuck in the system indefinitely. --Lucky ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Mixmaster-devel mailing list Mix...@li... https://lists.sourceforge.net/lists/listinfo/mixmaster-devel |
From: Colin T. <co...@tu...> - 2012-09-10 15:16:12
|
Quoting Lance Cottrell <lo...@ob...>: > I would be happy to create a new key, or act as a signer for a new key. Thanks, this is a resurgence of a rather old thread. I think at the time that Zax and I agreed that when we actually got close to a release I would generate an appropriate key and then ask people to sign it. Colin |