Maybe add something like: "The upgrade to "modern" GnuPG has been made as smooth as possible by offering migration scripts. However, beware: The upgrade comes with some subtle differences in GnuPG's interface. See /usr/share/doc/gnupg/README.Debian for more information."
Rationale: I'm thinking of e.g. 'all access to secret key material is handled by gpg-agent'. Thanks for your patch! Bye, Joost On Tue, Apr 18, 2017 at 03:10:43PM -0400, Daniel Kahn Gillmor wrote: > Package: release-notes > Severity: normal > Tags: patch > Control: affects -1 src:gnupg2 > > The GnuPG transition from jessie to stretch is a significant change. > We should document it in the release notes. > > Attached is a proposed patch. > > Regards, > > --dkg > > -- System Information: > Debian Release: 9.0 > APT prefers testing-debug > APT policy: (500, 'testing-debug'), (500, 'testing'), (200, > 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, > 'experimental') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > >From a743629071b6d138df19fef102a4b7c09b20fa81 Mon Sep 17 00:00:00 2001 > From: Daniel Kahn Gillmor <[email protected]> > Date: Tue, 18 Apr 2017 15:07:53 -0400 > Subject: [PATCH] Clarify and document GnuPG transition > > --- > en/whats-new.dbk | 22 ++++++++++++++++++++-- > 1 file changed, 20 insertions(+), 2 deletions(-) > > diff --git a/en/whats-new.dbk b/en/whats-new.dbk > index 0d6dcb7d..e91aad00 100644 > --- a/en/whats-new.dbk > +++ b/en/whats-new.dbk > @@ -276,8 +276,8 @@ Among many others, this release also includes the > following software updates: > </row> > --> > <row id="new-gnupg"> > - <entry>Gnupg<indexterm><primary>Gnupg</primary></indexterm></entry> > - <entry>2.0</entry> > + <entry>GnuPG<indexterm><primary>GnuPG</primary></indexterm></entry> > + <entry>1.4</entry> > <entry>2.1</entry> > </row> > <row id="new-inkscape"> > @@ -471,6 +471,24 @@ so are still included there. > </para> > </section> > > +<section id="modern-gnupg"> > + <title>Move to "Modern" GnuPG</title> > + <para> > + The stretch release is the first version of Debian to feature the > + "Modern" branch of GnuPG in the <systemitem > + role="package">gnupg</systemitem> package. This brings with it > + elliptic curve cryptography, better defaults, a more modular > + architecture, and improved smartcard support. The modern branch > + also explicitly does not support some older, known-broken formats > + (like PGPv3). > + </para> > + <para> > + We will continue to supply the "classic" branch of GnuPG as > + <systemitem role="package">gnupg1</systemitem> for people who need > + it, but it is now deprecated. > + </para> > +</section> > + > <section id="debug-archive"> > <!-- jessie to stretch --> > <title>A new archive for debug symbols</title> > -- > 2.11.0 >

