Gentoo Archives: gentoo-project

From: "Francisco Blas Izquierdo Riera (klondike)" <klondike@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] *.overlays.gentoo.org gets a new home
Date: Wed, 08 Feb 2012 04:02:22
Message-Id: 4F31F106.5090101@gentoo.org
In Reply to: [gentoo-project] *.overlays.gentoo.org gets a new home by Christian Ruppert
El 08/02/12 02:38, Christian Ruppert escribió:
> Hello everybody,
Hi idl0r,
> Old host: > pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40 > RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e > DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84 > ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6 > > New host: > hornbill.gentoo.org - 94.100.119.163 > RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3 > DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91 > ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
Just out of curiosity: why have this keys been changed? I'm also wondering how can I find a trust path for these new keys given that a user can't find any reference to your key id anywhere except on http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml which can't be accessed with https and only provides 32 bit keyids which are easily forgeable. Thanks in advance for any answers.

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-project] *.overlays.gentoo.org gets a new home "Robin H. Johnson" <robbat2@g.o>