-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Date:2013-08-14

For a number of reasons[0], I've recently changed my email provider and set up a new OpenPGP key. As a result I shall be immediately transitioning away from my ten-year old PGP key.

The old key will be revoked very soon, and so I would like all future correspondence to use the new one. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition.

The old key was:

pub 1024D/AE445B2E 2004-10-25 Key fingerprint = E27B 3AF7 C367 74C2 FFF0 40B7 5BB6 809B AE44 5B2E

and the new key is:

pub 4096R/0E7A0087 2013-08-14 Key fingerprint = AB4C DD88 559B B3AC DF63 DC76 AE2F F214 0E7A 0087

To fetch the full key from a public key server, you can simply do:

gpg --keyserver keys.riseup.net --recv-key 0E7A0087

If you already know my old key, you can now verify that the new key is signed by the old one:

gpg --check-sigs 0E7A0087

If you don't already know my old key, or you just want to be extra sure, you can check the fingerprint against the one above:

gpg --fingerprint 0E7A0087

If you are satisfied that you've got the right key, and the UIDs match what you expect, I'd appreciate it if you would sign my key. You can do that by issuing the following command:

** NOTE: if you have previously signed my key but did a local-only signature (lsign), you will not want to issue the following, instead you will want to use --lsign-key, and not send the signatures to the keyserver **

gpg --sign-key 0E7A0087

I'd like to receive your signatures on my key. You can either send me an e-mail with the new signatures (if you have a functional MTA on your system):

gpg --export 0E7A0087 | gpg --encrypt -r 0E7A0087 --armor | mail -s 'OpenPGP Signatures' smg@hush.com

Additionally, I highly recommend that you implement a mechanism to keep your key material up-to-date so that you obtain the latest revocations, and other updates in a timely manner.

I also highly recommend checking out the excellent Riseup GPG best practices doc, from which I stole most of the text for this transition message ;-)

https://we.riseup.net/riseuplabs+paow/openpgp-best-practices

Please let me know if you have any questions, or problems, and sorry for the inconvenience.

Steve Glass

0. https://www.debian-administration.org/users/dkg/weblog/48