* [PATCH] pgpkeys: use full keyid to trust Linus' key
@ 2023-07-16 19:42 Thomas Weißschuh
2023-10-17 17:58 ` Konstantin Ryabitsev
0 siblings, 1 reply; 2+ messages in thread
From: Thomas Weißschuh @ 2023-07-16 19:42 UTC (permalink / raw)
To: Konstantin Ryabitsev; +Cc: linux-kernel, Thomas Weißschuh
It's possible for fingerprints to collide.
To avoid that people accidentally trust an impersonated key document the
full key fingerprint.
Signed-off-by: Thomas Weißschuh <linux@weissschuh.net>
---
source/pgpkeys.rst | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/source/pgpkeys.rst b/source/pgpkeys.rst
index 78ba703ff42b..d036686c51dc 100644
--- a/source/pgpkeys.rst
+++ b/source/pgpkeys.rst
@@ -41,7 +41,7 @@ First, you should assign full trust to Linus's key (after importing it
into your keyring)::
$ gpg --import keys/79BE3E4300411886.asc
- $ gpg --edit-key 79BE3E4300411886
+ $ gpg --edit-key ABAF11C65A2970B130ABE3C479BE3E4300411886
gpg> trust
gpg> 4
gpg> q
---
base-commit: 8196a3c298d9b1f11be305c87eb890f44f7c8cc5
change-id: 20230716-keyid-8b0f50689d23
Best regards,
--
Thomas Weißschuh <linux@weissschuh.net>
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] pgpkeys: use full keyid to trust Linus' key
2023-07-16 19:42 [PATCH] pgpkeys: use full keyid to trust Linus' key Thomas Weißschuh
@ 2023-10-17 17:58 ` Konstantin Ryabitsev
0 siblings, 0 replies; 2+ messages in thread
From: Konstantin Ryabitsev @ 2023-10-17 17:58 UTC (permalink / raw)
To: Thomas Weißschuh; +Cc: linux-kernel
On Sun, 16 Jul 2023 21:42:36 +0200, Thomas Weißschuh wrote:
> It's possible for fingerprints to collide.
> To avoid that people accidentally trust an impersonated key document the
> full key fingerprint.
>
>
Applied, thanks!
[1/1] pgpkeys: use full keyid to trust Linus' key
commit: 6b2c89700cabd7ff9b180beb7c81d75778eafafa
Best regards,
--
Konstantin Ryabitsev <konstantin@linuxfoundation.org>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-10-17 17:58 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-07-16 19:42 [PATCH] pgpkeys: use full keyid to trust Linus' key Thomas Weißschuh
2023-10-17 17:58 ` Konstantin Ryabitsev
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox