Hi Nick, 2017-04-30 1:23 GMT+02:00 Nick Kew <n...@apache.org>:
> I've made some updates to our PGP verification page. > They can be seen at > http://httpd.staging.apache.org/dev/verification.html > > The reasons for updating it is that the old instructions > had become dangerously outdated, by virtue of using > 32-bit keys as if they were secure. As discussed in my > recent blog article at > https://bahumbug.wordpress.com/2017/04/27/pretty-good-phishing/ > > Comment solicited. I tried to preserve the shape of > the original with minimum change to introduce the reality > of 32-bit spoofing. > > Looks really good, thanks for doing it. Luca
