I've made some updates to our PGP verification page.
They can be seen at
http://httpd.staging.apache.org/dev/verification.html

The reasons for updating it is that the old instructions
had become dangerously outdated, by virtue of using
32-bit keys as if they were secure.  As discussed in my
recent blog article at
https://bahumbug.wordpress.com/2017/04/27/pretty-good-phishing/

Comment solicited.  I tried to preserve the shape of
the original with minimum change to introduce the reality
of 32-bit spoofing.

-- 
Nick Kew

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org
For additional commands, e-mail: docs-h...@httpd.apache.org

Reply via email to