Re: New signing key

[Roel Janssen <roel@gnu.org>]

[-- Attachment #1: Type: text/plain, Size: 1260 bytes --]

Hello Ludo’ and Guix,

I lost the password of the old key.  I updated my OpenPGP key on
Savannah to the new one (F556FD94FB8F8B8779E36832CBD0CD5138C19AFC).

I am trying to find the revocation key (printed) to revoke the old key
as reassurance that I am still me, and no malice is going on.  As I
moved twice since printing and securely storing the revocation key,
this will take some time.

Is there perhaps a key-signing party for GNU Guix maintainers to build
a better trust in the future?

Kind regards,
Roel Janssen


On Thu, 2020-03-05 at 18:13 +0100, Ludovic Courtès wrote:
> Hello Roel,
> 
> You signed commit cc51c03ff867d4633505354819c6d88af88bf919 and its
> parent with OpenPGP key F556FD94FB8F8B8779E36832CBD0CD5138C19AFC,
> which
> differs from the one registered in ‘build-aux/git-authenticate.scm’
> (17CB 2812 EB63 3DFF 2C7F 0452 C3EC 1DCA 8430 72E1) that you used
> previously.
> 
> Could you please reply to this message signed with the old key,
> stating
> that the new key is the right one?
> 
> As a last resort, if you lost control of the old key, could you
> ensure
> your Savannah account contains the new key and send a reply signed
> with
> the new key?
> 
> Thanks in advance,
> Ludo’.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 833 bytes --]