Use long key IDs or fingerprints to point to keys

This is safer than short IDs, where colliscion could exist.

Fixes #12448

Signed-off-by: Michal Čihař <michal@cihar.com>
This commit is contained in:
Michal Čihař 2016-08-08 14:34:25 +02:00
parent 6deff4131c
commit 12a66952a9

View File

@ -370,7 +370,7 @@ Verifying phpMyAdmin releases
Since July 2015 all phpMyAdmin releases are cryptographically signed by the
releasing developer, who through January 2016 was Marc Delisle. His key id is
0x81AF644A, his PGP fingerprint is:
0xFEFC65D181AF644A, his PGP fingerprint is:
.. code-block:: console
@ -379,7 +379,7 @@ releasing developer, who through January 2016 was Marc Delisle. His key id is
and you can get more identification information from `https://keybase.io/lem9 <https://keybase.io/lem9>`_.
Beginning in January 2016, the release manager is Isaac Bennetch. His key id is
0x8259BD92, and his PGP fingerprint is:
0xCE752F178259BD92, and his PGP fingerprint is:
.. code-block:: console
@ -413,7 +413,7 @@ point you should do one of the following steps:
.. code-block:: console
$ gpg --keyserver hkp://pgp.mit.edu --recv-keys 8259BD92
$ gpg --keyserver hkp://pgp.mit.edu --recv-keys 3D06A59ECE730EB71B511C17CE752F178259BD92
gpg: requesting key 8259BD92 from hkp server pgp.mit.edu
gpg: key 8259BD92: public key "Isaac Bennetch <bennetch@gmail.com>" imported
gpg: no ultimately trusted keys found
@ -462,7 +462,7 @@ clear error regardless of the fact that the key is trusted or not:
.. _Validating other keys on your public keyring: https://www.gnupg.org/gph/en/manual.html#AEN335
.. _Isaac's key links to Linus's key: https://pgp.cs.uu.nl/mk_path.cgi?FROM=00411886&TO=8259BD92
.. _Isaac's key links to Linus's key: https://pgp.cs.uu.nl/mk_path.cgi?FROM=ABAF11C65A2970B130ABE3C479BE3E4300411886&TO=3D06A59ECE730EB71B511C17CE752F178259BD92
.. index::