Re: [PATCH] SECURITY.md: add lautrbach@redhat.com gpg fingerprint

[Petr Lautrbach <lautrbach@redhat.com>]

Paul Moore <paul@paul-moore.com> writes:

> On Mon, Jan 5, 2026 at 12:46 PM Petr Lautrbach <lautrbach@redhat.com> wrote:
>>
>> The key is available at:
>> https://github.com/bachradsusi.gpg
>> https://plautrba.fedorapeople.org/lautrbach@redhat.com.gpg
>>
>> Also update the email address
>>
>> Signed-off-by: Petr Lautrbach <lautrbach@redhat.com>
>> ---
>>  SECURITY.md | 3 ++-
>>  1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/SECURITY.md b/SECURITY.md
>> index 2a7ce5b317a7..faa060ccff03 100644
>> --- a/SECURITY.md
>> +++ b/SECURITY.md
>> @@ -24,7 +24,8 @@ list is below. We typically request at most a 90 day time period to address
>>  the issue before it is made public, but we will make every effort to address
>>  the issue as quickly as possible and shorten the disclosure window.
>>
>> -* Petr Lautrbach, plautrba@redhat.com
>> +* Petr Lautrbach, lautrbach@redhat.com
>> +  *  (GPG fingerprint) 68D2 1823 342A 1368 3AEB  3E4E FB4C 685B 5DC1 C13E
>
> I think you may want to list the fingerprint of your primary key and
> not a subkey, as the primary key is what carries the signatures and
> helps verify trust.
>

I guess I need help then:

$ gpg --show-keys --fingerprint lautrbach@redhat.com.gpg
pub   rsa4096/63A8AD4B982C4373 2012-04-03 [SC]
      Key fingerprint = E853 C184 8B01 85CF 4286  4DF3 63A8 AD4B 982C 4373
      Keygrip = 6BC6915CA93F20709BC8B5020B8E22D7E6ED2F94
uid                            Petr Lautrbach <plautrba@redhat.com>
sub   rsa4096/06C3AB0B84CA81FE 2017-12-05 [A]
      Keygrip = 04808A09AA88E1CB0055033ACBC0A27D4ED46237
sub   rsa4096/BE22091E3EF62275 2017-12-05 [S]
      Keygrip = 56BA5B9D06707CA797DD4380A7ED91A95ED233CE
sub   rsa4096/7C4D5CA6A1BC4B25 2012-04-03 [E]
      Keygrip = B0FED3D171572C546D4601AB94C1852E46A02FE6

pub   rsa4096/BC3905F235179CF1 2022-10-26 [SC] [expired: 2024-10-25]
      Key fingerprint = B868 2847 764D F60D F52D  992C BC39 05F2 3517 9CF1
      Keygrip = FA0CE92171EEBAC2DD084E6399F18709A2F7353B
uid                            Petr Lautrbach <lautrbach@redhat.com>
sub   rsa4096/F1B73DE3D81A529B 2022-10-26 [E] [expired: 2024-10-25]
      Keygrip = 3A28778B1F09A154888A372BE543AB2CA12BB4F1
sub   rsa4096/2F2D5A2B6D4CC2C5 2022-10-26 [A] [expired: 2024-10-25]
      Keygrip = E5B12C87E5760AC68443C63D620AD3E407A67FA7
sub   rsa4096/4695881C254508D1 2022-10-26 [S] [expired: 2024-10-25]
      Keygrip = 55F576834D965A315EC66BF1327BAA810A5A2587

gpg: WARNING: No valid encryption subkey left over.
pub   rsa4096/FB4C685B5DC1C13E 2024-11-04 [SC] [expires: 2026-11-04]
      Key fingerprint = 68D2 1823 342A 1368 3AEB  3E4E FB4C 685B 5DC1 C13E
      Keygrip = 834230A0854D7A8698B5432C007560FE7AECC504
uid                            Petr Lautrbach <lautrbach@redhat.com>
sub   rsa4096/C500C028A770AB66 2024-11-04 [E] [expires: 2026-11-04]
      Keygrip = 2EF1D48B43E234CAAE155A0AD032C00063FCB102
sub   rsa4096/CDCAE8C927C6BE31 2024-11-04 [S] [expires: 2026-11-04]
      Keygrip = CAE3E6B80FFD15958C813CC635CFFDF9F86D9C17
sub   rsa4096/37BCD711A64B2890 2024-11-04 [AR] [expires: 2026-11-04]
      Keygrip = 850707DAF56607DEABD28933FD0A77D382923F1C



I'm looking at the last one Petr Lautrbach <lautrbach@redhat.com>
[expires: 2026-11-04] 



>>  * Nicolas Iooss, nicolas.iooss@m4x.org
>>    *  (GPG fingerprint) E25E 254C 8EE4 D303 554B  F5AF EC70 1A1D A494 C5EB
>>  * Jeffrey Vander Stoep, jeffv@google.com
>> --
>> 2.52.0
>
> -- 
> paul-moore.com