Following the example of bdonlan, I went and generated a new GnUPG key. If you have no idea what that is, don’t worry. :)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I've redone my GnuPG (GPG) key using a very large master key size, 'cause the old one was fixing to expire, and it had existed long enough for cryptoanalysis to have started putting a dent in it. ;)
So, I have a new key:
pub 4096R/49FA0E60 2005-02-17 Dylan William Hardison (Jabber) dylan@myjabber.net Key fingerprint = 0BE3 AF63 B4B0 7232 171D BA10 72FB A2E1 49FA 0E60 uid Dylan William Hardison (2005) dylan@hardison.net uid Dylan William Hardison (GMail) dylanwh@gmail.com uid Dylan William Hardison (CPAN) dhardison@cpan.org uid Dylan Hardison (work email) tinker@hardison.net sub 2048R/306AD45E 2005-02-17 [expires: 2005-08-16]
So, my new finger print is 0BE3 AF63 B4B0 7232 171D BA10 72FB A2E1 49FA 0E60, and the key id is 49FA0E60 (the last octet of the fingerprint).
My old fingerprint is: D67D 2B75 53C6 9769 30E4 D390 239F C833 F32C F6F6
Which is scattered across the internet, and heavily associated with my name. But, I needed/wanted a new key. So I'm going to post this message in various places in the hope that search engines and such will realize that my new key, the GPG key of Dylan Hardison, is "BE3 AF63 B4B0 7232 171D BA10 72FB A2E1 49FA 0E6".
My new key is signed by my old key, and this message is signed by my new key and my old key (in that order).
My old key will expire in one week, so don't use it any more. So, use 49FA0E60. - -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux)
iQEVAwUBQhQOmunCllSoasPqAQLzOAgAkD/wAnW++y4qYeHlxo592nYyrOBNJydW d7NlLEwF4hyTFZ/hgFlS5RG0Y6uHn2yL5a2XaDKfakYLm+nmg4eMrLSj6X0OBdsq N5xq8iux8chrDNHDa05lvIUvDRyRSCWXAp+nq5AhxN1dE7yw+wRSVk77BOdmNSfD EYQrUaCioAWKt6qKSiRPVjDFh5vkvxe7+zv/URHYMlLrKv2DWfEdtUuHZMWMPGHP P/yCW9XiAVZ4NgGFOuJjqk9nAyjptEV8QI1hSYnReOmqzCdG0z2gaWMjZyS2t84X wVjXAOTlmMbY48TOZ+dl0QMGZIxanPXmIRibjIcUbM+tvLBxs/r4gg== =V3jB - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFCFA7yI5/IM/Ms9vYRAiNtAJ9xkRE6DzP49wMmo/KVhIZSj/pCAgCeIkcw +xSP/gBN7Nf6eebVh+voYCU= =QVh0 -----END PGP SIGNATURE-----
*falls over*
It says “Hash: SHA1″ there. That looks like a bad thing.
SHA1 is still secure for that purpose, and my GPG doesn’t support SHA-256 or SHA-512.