- Make OpenPGP only one of many protocols
+ KEYS.md only holds the current keys
+ OPENPGP.md describes all OpenPGP details
- Make the current public key available at the root
- Add scripts/ to automate the various steps:
+ bootstrap.sh
+ publish.sh
+ sign.sh
+ snapshot.sh
+ verify.sh
Executed the full supersession ceremony:
- ceremonies/: signed record of the supersession
(signed by both old keys plus the new one)
- history/: added final states of
344EA5AB10D868E0 (main key from 2020 to 2026) and
6D11C1E91D3B0265 (main key for 5 months in 2026),
both revoked as "superseded" and cross-certifying the new key
- snapshots/: first export of 75681C8167312680 as published,
certified by both predecessors, verified on keys.openpgp.org
- the UID alexander@hess.software is revoked and withdrawn
All five keyservers, WKD (three domains), and the `git` forges
serve only the new key from now on.
