-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Guilhem,
Op 26/08/16 om 01:15 schreef Guilhem Moulin: > Hi Leah, > > On Thu, 18 Aug 2016 at 22:44:12 +0100, Leah Rowe wrote: >> GNU Libreboot 20160818 >> >> This is a brand GNU release. Libreboot joined the GNU project on >> 14 May 2016. This 18 August 2016 release is the first GNU release >> of libreboot. >> >> Get it from https://libreboot.org/download/ > > Congrats for the new release! I noticed you changed the OpenPGP > key used to signed the SHA512SUMS file. The new key (fingerprint > CDC9 CAE3 2CB4 B7FC 84FD C804 969A 9795 05E8 C5B2) does not appear > to be in the strong set; in particular, it's not cross-signed with > either the old relase signing key (fingerprint C923 4BA3 200C F688 > 9CC0 764D 6E97 D575 656F 212E), nor the key you used to sign your > announce message (fingerprint F894 6B9C 6DBA 8869 AF3E 1480 FF45 > B74C F9D1 CF94). > > Would you mind cross-signing these 3 keys (and uploading them to > the keyserver pool afterwards)? This should be enough to connect > the new release signing key to the strong set, and therefore help > people to establish trust path to it. I can't use the old signing key (I lost it) but I signed it with my email key, the info I use for this email address. Others have verified this key so this should be enough. - -- Leah Rowe Libreboot developer Use free software. Free as in freedom. https://www.gnu.org/philosophy/free-sw.html Use a free operating system, GNU/Linux. https://www.gnu.org/ Use a free BIOS. https://libreboot.org/ Support freedom. Join the Free Software Foundation. https://fsf.org/ Minifree Ltd, trading as Ministry of Freedom | Registered in England, No. 9361826 | VAT No. GB202190462 Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK | Web: http://minifree.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJXv/DQAAoJEP9Ft0z50c+U89IIAKYnPeOIYvsruDh4U27aATA5 445y/6Dobxx1vc6CJ7fI+5v/kh4Xbui/pws2AckmZvlxy8mIyAWcbWOM6v01taoh fEpX464igjfPBCz1gNa/DG3kzsTDHwC/fOX+FnzYonPuvJvItOh4JAl0fMettSG/ oGQIz6NAHTJZyYGdpUz9uRQVnnZE7FcPEun8tXg6nBcE6LcF5VZy4UZfNeak5jqo MS8MarvMQq54cc4Gn6T7Aq0zWTZLXaYHZA/EdC/3GX92zfkhXduxlT6AugJDvYRq aKx45IEScAijWcFKq+Jl9prRM714BpLsS52O6JisQiSlxAyg06imODUCrwZAYsg= =stTU -----END PGP SIGNATURE-----
