2010-12-04: Key Revocation
I mentioned on 2010-10-10 that I’d revoke my old B1233772 key and transition to 196AA973. I have now revoked it. There's a full writeup of why I did this on the Debian admin blog and a more accessible writeup of the DSA1 rollover at riseup.net.
The long and short is that you'll need to mail me using my new key, which is available below or on the usual keyservers. My new key is:
pub 4096R/196AA973 2010-10-10 charlie
Charlie Harvey
secret name
Fingerprint=992E E813 45E6 A007 DFCB 1FD1 FCAD 32A5 196A A973
Here is the full detail:
-----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.10 (GNU/Linux) mQINBEyxpRIBEAC8+jL4r2tZk1Hu87Rhcy5+EUVlnqBLWZ0x/rsm1x7z/TRkBAVU 0WzUHQFl2uhD0ViAKNZRIqC0EyIslSR1KAnuNajPo5oIX1m/AFgf16T7WV7a5/HD N/KqVxIBCcHyKprRf+tyGpwYXCI6MKN1hAXM8PvxrEzVeMs9qCoKVGmPYRddc0l8 S1f5Tmm1XLYpyG7EeGmyWtpYgaa+RrxQDzpA9y51RNjZ0xlMlufOa2p5bDwWMsKo ZibYpMGrG0v+jKOkBBQzGLbnJR0x7pNjZFgni6w3gCUnijXUP8fsIEC/9Q71y6Oa b/HxSE+6Isdj7Dqwp+0vUxAjDgNqVBCjl/2iJIf7PMHbrdBZvu/jC25pKBWKQpHV 6AS9B2UY3YsVJSyJSCXEJa5iX8RRlISfBC507IxVgseOv2oo8I97tqKqZMSSqwjn IGHmMaz5L7NLkP9WIJjaKBR/QALz2XPIcuwZhdPVTD771HECEtAQI4lcyfj2Z9xj 02Aq8XiyjIcJvsvZE8Lj7bjMUUTIhAf00JTpL0L0bOmSnNI2NtlpKuXmtBn4P/fp 5oLKt3RI/iQpBfdD7TQBXvGJ2J4KAuDAu27lyW1TT/Nn31hxsxo5jgaNdb+D/5ae SUQYfepDOn6F2RbqePIakyCu8yalHvy8oll9K64IXG2XCHxfvtaKVP+c9wARAQAB tCNDaGFybGllIEhhcnZleSA8Y2hhcmxpZUBuZXdpbnQub3JnPokCPQQTAQoAJwUC TLGlEgIbAwUJCWYBgAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRD8rTKlGWqp c8rDEAC4lg4IcZkIjmf+idTYgikyTV8fzfRVJj0wy/mmGnKOrKPvYJPYLl5Hmf3o sUJIlC0QfIwWvdYP7fmg5NGPTCaI6cx9uPtYGgXLYfvSPaot4/hkKBSyl0YwKvjp FS2eRya0Nxj2B2EpI0s5ERAv4dx8BL2Z78NPbqPP04dkohsKYVrIeiyUMXl/vOOb 5b6NknEwXnoehD+xkmu7+Bak4uH6D6mbTbAK4S46Kqv22rJArW90kQhobbG3VYVF GivKuguBuxxn76Jyg4pusxg7/9R3RO+DloojClJeNhhZxCtNq1QZVROfTBfs5Olc iYLePnVnhNFqEV6ZbBywWBSUdvIZVg//Zm/a58jutjUQMXTFFPepL2ZZc2Tqel++ Kc85bmzNMBx7HkYZ8J+H/iEnOwoTyQo/nkAU9uPO4RNbvTVfOqcZRBJGJrF3ca/K FRTYMh7MjmXyPTbS2vaz86VL2oMF2yNPwgM70jx4F3qd9RwPi1b/yNoTnt94UazI oKN+21DdO0RdLjXLRUofBiz7F276odGV4t11hwcQybcDDRoX+3idJngwXxVrMFVP X2i/+UlU/0WHxGH6W7YOmGd05iubJTgRfAr53sonc5FPr//Xlj+71zdvsSOBmlyD DVH+f+0TAQaeuz+C5OTOJBiH0/ZqxcTQ7Nv9nqBiZlUouL4V64hKBBARCgAKBQJM saaSAwUCeAAKCRCCCNeusSM3cupDAKCF/lHAk0ygNZwr1SZ4jLfLtr3b4gCg3IrS R/Fw0D3SG5EIsRXDa4m9tuq0KnNlY3JldCBuYW1lIDxuYW1lc3BhY2Vwb2xsdXRp b25AZ21haWwuY29tPokCPQQTAQoAJwUCTLGn2AIbAwUJCWYBgAULCQgHAwUVCgkI CwUWAgMBAAIeAQIXgAAKCRD8rTKlGWqpc6d9EACZ4ydCprmis8CRlR2Cx940tGS3 JuQOjZVNK6/X0xcnvyoifazX0NLYgW6zWj4vLLsT24DtQzMciRiefk8OSwJwhY3e X4jftTRksRF25Jq531boDDGGXFLMVnXN7RGMTRnUdrioZeqWa3ASy5lKPDZptrJW iNiRwXNoHtcdCAuNHjzntg2JWFKF1DRs86TUq+sCHz3ddXTD6ovGnVy44LxbK3PH kp+ucSMgCQ5lfd//JEUBtwFiC6WogQlyiJCBqCyLDP7edAS+7i4Vo3BtPW0LTUJ/ mi+L/vEJPys9IpX8w8/Y/XJVkJtvo0ogFwEF723Og2Qy4Gwi+ZjQMdF87vME9/sV VKhILVn8y4GOwhQ8disB1vTgznZvH8374YdUgXc6VSKiDlN6IySw125JQW3Rcsx7 D8qkQia9FaNPuJ1MsGdgrmgF+CxUiTWPDUlsvYgXGx2Jge4Rws0LT53Fwf7GowuT 8WetEHqo534f7P6Ldkt56cyTqZEo9zlZjEO1zGr52w3hMgPz9jJHrladTSA4e4xg QcVVx1zPqgXJKjiE8L6fr66HjlJQQrRS4tImPACwx92nqTnRChwKxoEpyYdxD94G hZ893PWW/i2gwEFEHZ1q/Vdeyh4OjpIHl0bnP3KQ/JJnHsKrswFC1oadKm5jBsWW m3v2QKozxI9yRJ7EOLQTY2hhcmxpZSA8Y0BveDQub3JnPokCPQQTAQoAJwUCTLGn 9AIbAwUJCWYBgAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRD8rTKlGWqpc5Wj D/9TRZNufLrL0XWQEFAkMpHFaWmi0XvVyBcl2c/1QmiF50EWQRDPI+vfKCldvjWU awSM2s5jRlpRG3XfEsh7Zl2FeASjpaxMHrmG4D6boxCPuJOuZKqEJv/6utFRIye3 hwho4iW7mVJCE0JpXoeuE3wgDHsOor8jLNgDn5NLohcL1SQMnmAz/aFhbeEmPH5/ Ry6LwAbXh7Guyn6ohqEiYqfDNtt8XbN7NRhAng7tUefbmJ2zpcEkm7IlFvfHo6nl XO8WrMxmM6YfgnatYdKna+7nU5z1/Xqw1FZql7gZki+elQ/K96YaZlHZXn15IU5e EBVzaGUFJQXdyBxGbOcvpI189t28Z0+YqQ52tynrJ20u0QPeCStVNdYB1lSK4ETZ bveGcTB4VHkmDHOSGmlet+HJGOuB8rp7YVH60dqA+fiDRiswHfwY6ZDEAQjBzwn1 9xi0sragYc8YZ76c2j+6kCFgMDtZ8TJZjFYyHLdk1MTA82IkkVL3MDcaMrHSQi8V 1zLpBamyBvwF2834hOzAhhKzdRRniFceYZIUBYu42zqkIGgTiQrVuyO0YiOGa5Td UMeOAR2FiYKecPhp8g4YdNhmIoFC61mQ/JJBU/AMV9UmMmvpRyojrKBiBfJJ8ZP8 YaG28CfvTfRRe8jjhNd9wzB5rsXOZZJ3cZoqRmKEOoq4O7kCDQRMsaUSARAAvxWh 41fFKiANb3xJQ2hV9mc1+w6E/RV+PArozqMHyu6MrqQMYlu8dOSwOxER4F7J7nEJ I7S2I0gH6qRW4RPvxjMTmBBTEquYabHsGICJE54iZ6z8cvkk4i/CRBZ+FE+77tlY 9uqrvNQ7scMtq9ZMgh5ElYT6EoNWlMfVuXLuZ7wYySc0F9/yYwpYpmY82Xe27QDp 7WDp1vU+w8Sb2yz+HXTsx1lCoFxujkmPwxLxKsLGI1hR3QxZRanXOyPsRcWuZAdm 1rNilovG9nnYIF79JA4Z3KKZHF4oK+1su9zounU9TR0FZ8OqLiPkrPWLrTjLktcu k0M/Fvj7C6Nuc2JobCsyhI99jtmov8vTHg+lfE7Jk/HkMU2iZ70Oom9tQw9nqYy3 wuyoxvtAy3F8z/XJFP+qJBcu3M3sc6ndO0Gvihi3GB9S5Uv7u2UKNQ0wBkhv285t HCeUOJIl9callGwNX77edHfqLhbC4bVrgbmT3MzUlZvKSfPmz6Vdmrve7SmkVyo5 V6aDD6YybdcI7XcnbWXWmMNScoF3LnWQvOovi4dtTEI7L3totv+Q+CtFBhWcywZ3 rQIWcJwzKRoWvPYUb49DcHicYixCAnzI9sWT1CiqF7Q54CExmacgfXwzwBDpTZKF z6kp2RYge+0IGovsZGrwrJ8+QhNszMHeNmVgZf0AEQEAAYkCJQQYAQoADwUCTLGl EgIbDAUJCWYBgAAKCRD8rTKlGWqpc3DDEAC5Yaqn+pAmZ3QvrtQ+nRWK74nDD0T8 s1/FpLsF5MYUekMG4rrlhZtdF906xDVTzHAY7sP7KLf7NboQWFUjdCDnye9oPymM 7SigwzmFoURZ45FNgpjpQVG+vSlxXIXHEAdfhuH6YRsO44PeTqgoZzv4S/VKLSl9 wHDOOhTC6Bt9awz7QYuwPFVvDemjPVNNpCnaXkLdVxOO6+lvc0NA0pE6S5cyEPbb ar8UnrYtpmzo0mASyHFg84uKwYVz6vcxbR51m3APgAgnZG2SjxlQDR9Vmg/Sm+zG m8MvDlDjxIdMDX+s6+JanH2Gk937kxc6N4lT16DgP+/HDjeKZhW3Wt5+NPGhYjs0 XKkInR03rbI/iMtNnpmRxOr0PQVJmBSqAObFVkpFqvCed7IyhtueFZSV2RUf77sX JOUAf3StFFqVnBBT8yPLrLi8EA7QfzdjsP9BPd3/qrPLHzikbDdBa8Hdq/KJUgTc phzH3yiX+xN28oZOCGCDRAwDZnBn6sjsroq9jbXrx5Wuep9uU2FL7w2aghApKtKX buBzjRSFQysgTnbbGf/+f3PDI9ItQ9oD04cbIPjDxN4kMqExptaiwpvdjWtpr8aS Oo4UjuQ3Oyg7Vnb67TervtQ2/QKpzGP/hbJ7zowVmMshu00+kd2bFcbKLn8LKMLq kUoh4omX/qKtdw== =fqb+ -----END PGP PUBLIC KEY BLOCK-----
More info
To fetch my new key from a public key server, you can do: $ gpg --keyserver pgp.mit.edu --recv-key 196AA973
If you already know my old key, you can now verify that the new key is signed by the old one: $ gpg --check-sigs 196AA973
If you don’t already know my old key, or you just want to be double extra paranoid, you can check the fingerprint against the one above: $ gpg --fingerprint 196AA973
If you are satisfied that you’ve got the right key, and the UIDs match what you expect, I’d appreciate it if you would sign my key: gpg --sign-key 196AA973
Lastly, if you could upload these signatures, I would appreciate it. You can either send me an e-mail with the new signatures (if you have a functional MTA on your system): gpg --armor --export 196AA973 | mail -s ’GPG Signatures’ charlie@newint.org
Or you can just upload the signatures to a public keyserver directly: gpg --keyserver pgp.mit.edu --send-key 196AA973 Please let me know if there is any trouble, and sorry for the inconvenience.
Old bits: Hysterical interest only
2010-10-10: Key Transition
I’m moving away from using my old key (B1233772) and using a new one (196AA973). There is a good explanation of the DSA1 rollover at riseup.net.
My old key will continue to be valid for a few weeks, but I’d prefer all future correspondence to come to the new one. I would also like this new key to be re-integrated into the web of trust. This message is signed by both keys to certify the transition.
My old key was:
pub 1024D/B1233772 2008-12-04 Charlie Harvey
secret name
Fingerprint=38BE CFA5 C92C D179 7475 C67C 8208 D7AE B123 3772