From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933346Ab1JDWEw (ORCPT ); Tue, 4 Oct 2011 18:04:52 -0400 Received: from terminus.zytor.com ([198.137.202.10]:37164 "EHLO mail.zytor.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932820Ab1JDWEt (ORCPT ); Tue, 4 Oct 2011 18:04:49 -0400 Message-ID: <4E8B82F2.8020709@zytor.com> Date: Tue, 04 Oct 2011 15:04:34 -0700 From: "H. Peter Anvin" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:6.0.2) Gecko/20110906 Thunderbird/6.0.2 MIME-Version: 1.0 To: Jiri Kosina CC: Heiko Carstens , Linux Kernel Mailing List Subject: Re: kernel.org status: establishing a PGP web of trust References: <4E8655CD.90107@zytor.com> <20111004125134.GB2803@osiris.boeblingen.de.ibm.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 10/04/2011 03:02 PM, Jiri Kosina wrote: > > In the meantime, at least one reason came up in parallel discussion ... a > lot of people have those oldish keys generated as 1024bit or so, and using > DSA. > > And it seems like 4096/RSA is sort of required here. > If nothing else it should be considered modern practice. -hpa -- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf.