I've made some updates to our PGP verification page. They can be seen at http://httpd.staging.apache.org/dev/verification.html
The reasons for updating it is that the old instructions had become dangerously outdated, by virtue of using 32-bit keys as if they were secure. As discussed in my recent blog article at https://bahumbug.wordpress.com/2017/04/27/pretty-good-phishing/ Comment solicited. I tried to preserve the shape of the original with minimum change to introduce the reality of 32-bit spoofing. -- Nick Kew --------------------------------------------------------------------- To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org For additional commands, e-mail: docs-h...@httpd.apache.org