Exit Zen
7
English type: Bullet: ' - '
Sign our official ISO images.
0/290 · 29
8
English type: Bullet: ' - '
Certify the other [[OpenPGP keys|doc/about/openpgp_keys]] used by the project.
0/780 · 78
10
English type: Plain text
<p>The previous signing key is safe and, to the best of our knowledge, it
has not been compromised.</p>
0/1040 · 104
11
English type: Plain text
<p>We are doing this change to improve our security practices when
manipulating such a critical piece of data.</p>
0/1150 · 115
14
English type: Plain text
<ul>
<li>The old key can still be used to verify Tails 1.3 ISO images.</li>
<li>The new key will be used to sign ISO images starting from Tails 1.3.1.</li>
</ul>
0/1660 · 166
15
English type: Title =
Import and verify the new signing key
0/370 · 37
16
English type: Plain text
Click on the following button to download and import the new signing key:
0/730 · 73
19
English type: Plain text
To verify that the new key is correctly signed by the old key, you can execute the following command:
0/1010 · 101
20
English type: Plain text
gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F
0/620 · 62
21
English type: Plain text
The output should include a signature of the new key by the old key such as:
0/760 · 76
22
English type: Plain text
sig! 0x1202821CBE2CD9C1 2015-01-19 Tails developers (signing key) <tails@boum.org>
0/960 · 96
23
English type: Plain text
In this output, the status of the verification is indicated by a flag directly following the "`sig`" tag. A "`!`" indicates that the signature has been successfully verified.
0/1740 · 174
24
English type: Title =
Security policy for the new signing key
0/390 · 39
25
English type: Plain text
Here is the full description of the new signing key:
0/520 · 52
26
English type: Plain text
<pre>
pub 4096R/0xDBB802B258ACD84F 2015-01-18 [expires: 2017-01-11]
Key fingerprint = A490 D0F4 D311 A415 3E2B B7CA DBB8 02B2 58AC D84F
uid [ unknown] Tails developers (offline long-term identity key) <tails@boum.org>
uid [ unknown] Tails developers <tails@boum.org>
sub 4096R/0x98FEC6BC752A3DB6 2015-01-18 [expires: 2017-01-11]
sub 4096R/0x3C83DCB52F699C56 2015-01-18 [expires: 2017-01-11]
</pre>
0/4670 · 467
27
English type: Plain text
You can see that it has:
0/240 · 24
28
English type: Bullet: ' - '
A primary key (marked as `pub`) with ID `0xDBB802B258ACD84F`. This primary key:
0/790 · 79
29
English type: Bullet: ' - '
Is not owned in a usable format by any single individual. It is split cryptographically using gfshare.
0/1020 · 102
30
English type: Bullet: ' - '
Is only used offline, in an air-gapped Tails.
0/450 · 45
31
English type: Bullet: ' - '
Expires in less than one year. We will extend its validity as many times as we find reasonable.
0/950 · 95