Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Ben Finney
Jonathan McDowell nood...@earth.li writes: * Replacement of the old key with the new one should not cause any other key to no longer be in Debian's Web of Trust nor strongly connected subset. Is there a simple way of checking whether this is true for a given key? * Replacement of the old

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Jonathan McDowell
On Wed, May 20, 2009 at 07:43:53PM +1000, Ben Finney wrote: Jonathan McDowell nood...@earth.li writes: * Replacement of the old key with the new one should not cause any other key to no longer be in Debian's Web of Trust nor strongly connected subset. Is there a simple way of checking

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Magnus Holmgren
On onsdagen den 20 maj 2009, Jonathan McDowell wrote: My attitude to this is that yes, people should be considering replacing their existing GPG keys with something stronger using SHA256 or better for signatures (and a keysize of greater than 1024 bits). Hmm, would that mean gpg --enable-dsa2

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Clint Adams
On Wed, May 20, 2009 at 08:50:09PM +0200, Magnus Holmgren wrote: Hmm, would that mean gpg --enable-dsa2 --cert-digest-algo SHA256 or something? Also, does gpg have an option to make it output the hash algorithms of key (ID) signatures? I can't seem to find one. Feed a key to gpg