alexander/keys
Watch
1
0
Fork
You've already forked keys
 0
Code Activity
keys/KEYS.md

36 lines
785 B
Markdown
Raw Normal View History

Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
# Keys
Initial commit - add generic README.md - add outline on how we structure the keys in KEYS.md
2026-07-08 13:04:55 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
The current public keys of Alexander Hess
(i.e., "me" in this repository).
Initial commit - add generic README.md - add outline on how we structure the keys in KEYS.md
2026-07-08 13:04:55 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
This file is re-signed at every ceremony,
which can be verified:
Generate a new PGP key Document how the new key was created
2026-07-08 15:29:55 +02:00
```bash
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
./scripts/sign.sh KEYS.md # to produce KEYS.md.asc
Generate a new PGP key Document how the new key was created
2026-07-08 15:29:55 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
gpg --verify KEYS.md.asc KEYS.md
Generate a new PGP key Document how the new key was created
2026-07-08 15:29:55 +02:00
```
Archive all dead keys
2026-07-08 16:00:04 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
## OpenPGP
Archive all dead keys
2026-07-08 16:00:04 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
Fingerprint:
Archive all dead keys
2026-07-08 16:00:04 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
> [`8B11 40AD B518 5334 E9FA 513B 7568 1C81 6731 2680`](https://keys.openpgp.org/vks/v1/by-fingerprint/8B1140ADB5185334E9FA513B75681C8167312680)
on [OpenPGP](https://keys.openpgp.org)
Archive all dead keys
2026-07-08 16:00:04 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
Armored export: [`public-key.asc`](public-key.asc)
Archive all dead keys
2026-07-08 16:00:04 +02:00
Restructure the repository - Make OpenPGP only one of many protocols + KEYS.md only holds the current keys + OPENPGP.md describes all OpenPGP details - Make the current public key available at the root - Add scripts/ to automate the various steps: + bootstrap.sh + publish.sh + sign.sh + snapshot.sh + verify.sh
2026-07-08 19:10:11 +02:00
For policies, ceremonies, and history, see: [`OPENPGP.md`](OPENPGP.md)
Add `age` key - Add AGE.md with policies - Add age-recipient.txt for `age -R` - Add ceremonies/2026-09-13_age_key.md as the signed record of which recipient is valid from which date - List the recipient in KEYS.md - Describe AGE.md and age-recipient.txt in README.md - Extend the scripts: + sign.sh signs AGE.md by default + verify.sh verifies AGE.md by default and cross-checks age-recipient.txt, the only unsigned artifact, against the recipient in the signed KEYS.md and AGE.md
2026-09-11 15:48:18 +02:00
## `age`
Recipient:
> `age1gzy6tj8y93ljuelcedrkcsv3p6gygk7ng3386u32av9a4ujh737qef8crp`
Recipient file: [`age-recipient.txt`](age-recipient.txt)
For policies, see: [`AGE.md`](AGE.md)
Copy permalink