[HacktionLab] Take action, with Google?!

Garcon du Monde gdm at fifthhorseman.net
Thu May 29 15:25:40 UTC 2014


hi sam (and anyone else out there in a similar position),

On Thu, May 29, 2014 at 03:23:09PM +0100, sam at bristolwireless.net wrote:

> pub  1024D/0x1753463CEF50D7E5 2013-04-28 Sam Rossiter (2) <sam at bristolwireless.net>
> sub  1024g/0x57BEF2A71F3BB7A8 2013-04-28

just to point out that it's probably a good idea to update your key, as
those based on 1024 DSA should be considered not secure:

  The Digital Signature Algorithm, in its original form, only allowed
  maximum 1024-bit asymmetric keys, and the signature process itself
  signs a 160-bit hash, initially officially specified as SHA-1. This
  means that 1024-bit DSA keys should be phased out as well.

  So if you have a 1024-bit DSA key as your primary key ... you should
  consider creating a new primary key and starting the migration
  process.

FROM: http://www.debian-administration.org/users/dkg/weblog/48 (which
also advises on how to migrate your key).

solidarity,

	--gdm

-- 
GPG: 5607 E4BC C6B6 90F4 5EBC  B348 D01B 9D77 912F 963C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.aktivix.org/pipermail/hacktionlab/attachments/20140529/cd177eb2/attachment.sig>


More information about the HacktionLab mailing list