1
0
Fork 0

Supersede all old keys with 75681C8167312680

Executed the full supersession ceremony:

- ceremonies/: signed record of the supersession
  (signed by both old keys plus the new one)
- history/: added final states of
  344EA5AB10D868E0 (main key from 2020 to 2026) and
  6D11C1E91D3B0265 (main key for 5 months in 2026),
  both revoked as "superseded" and cross-certifying the new key
- snapshots/: first export of 75681C8167312680 as published,
  certified by both predecessors, verified on keys.openpgp.org
- the UID alexander@hess.software is revoked and withdrawn

All five keyservers, WKD (three domains), and the `git` forges
serve only the new key from now on.
This commit is contained in:
Alexander Hess 2026-07-08 17:27:41 +02:00
commit a4f48a61a3
Signed by: alexander
GPG key ID: B46EDB4DFC26805D
8 changed files with 375 additions and 0 deletions

View file

@ -62,6 +62,9 @@ gpg --verify KEYS.md.asc KEYS.md
- `snapshots/<KEYID>-public-YYYY.asc`, committed at every ceremony
- One commit per ceremony to keep
snapshot, changelog, and re-signed `KEYS.md` together
- `ceremonies/<date>_<event>.md` with own signatures
for exceptional events (e.g., key supersessions);
routine ceremonies go into the changelog below instead
- Distribution:
- WKD on all three UID domains
- public keyservers (see section below)
@ -218,6 +221,8 @@ gpg --show-keys history/*.asc # shows the revocations and expiries
| Key ID | Created | Terminated | Note |
|--------------------|------------|--------------------|-------------------------------|
| `6D11C1E91D3B0265` | 2026-02-16 | revoked 2026-07-08 | main key for 5 months in 2026 |
| `344EA5AB10D868E0` | 2020-07-17 | revoked 2026-07-08 | main key from 2020 to 2026 |
| `6F75AAA4E8C99523` | 2020-06-16 | revoked 2020-07-17 | discarded |
| `9EE068C095A840A0` | 2018-10-16 | revoked same day | botched |
| `77D28D388024AE85` | 2018-06-17 | revoked same day | botched |