Add age key
- Add AGE.md with policies
- Add age-recipient.txt for `age -R`
- Add ceremonies/2026-09-13_age_key.md as the signed record
of which recipient is valid from which date
- List the recipient in KEYS.md
- Describe AGE.md and age-recipient.txt in README.md
- Extend the scripts:
+ sign.sh signs AGE.md by default
+ verify.sh verifies AGE.md by default
and cross-checks age-recipient.txt,
the only unsigned artifact,
against the recipient in the signed KEYS.md and AGE.md
This commit is contained in:
parent
8ece401276
commit
ae768285b6
12 changed files with 170 additions and 14 deletions
|
|
@ -66,7 +66,7 @@ gpg --verify OPENPGP.md.asc OPENPGP.md
|
|||
for convenient usage,
|
||||
refreshed by `scripts/snapshot.sh`
|
||||
- `ceremonies/`, signed records of exceptional events,
|
||||
such as the 2026 supersession
|
||||
such as the 2026 supersession and the `age` key introduction
|
||||
- `history/`, armored exports of all retired keys,
|
||||
see [Key History](#key-history) below
|
||||
- `snapshots/<KEYID>-public-YYYY.asc`,
|
||||
|
|
|
|||
Loading…
Reference in a new issue