I need you to add new dsa pubkey so I can access my devbox, my notebook is on
repair, I'm working just with the Windows box at work.
add this pubkey
Steps to Reproduce:
re-submit the key signed by your gpg key (0x8B36AE49) please
My GPG key is on my notebook, is there another way ?
We need to authenticate you and we can't do that without a signed message or
confirmation that you are who you say you are from devrel and/or your mentor.
I sent this to -core twice.. First on 8/19 and then on 9/12. Now I will post
it here because you obviously missed it the first two times:
---------- Forwarded Message ----------
Subject: [gentoo-core] SSH and GPG Key reminders..
Date: Friday 19 August 2005 01:20 pm
From: Corey Shields <firstname.lastname@example.org>
Couple of reminders about your ssh and gpg keys:
- Passwordless ssh keys for getting into Gentoo infrastructure is a bad
practice. It becomes a security liability if the box you have your key on
ever becomes compromised. Please keep a passphrase on your key.
- It may be a good idea to keep a copy of your private ssh key in a secure
location, if you have a secure location you can keep it in.
- If you happen to lose your private key, e-mail email@example.com
with a note -that is signed with your gpg key- to start a recovery procedure.
This should ring a bell that if you do not have a backup of your gpg keyring
somewhere and you lose both at once, you could become screwed.
- As for gpg keys, everyone should have a paper copy of their revocation key
on file in a secure location somewhere. If your private gpg key is ever lost
or compromised, you can then use the revocation certificate to mark that key
as invalid on the keyservers. Otherwise, "no expiration" keys will remain
marked as valid forever in the ether.
Gentoo Linux Infrastructure Team
Gentoo Foundation Board of Trustees
Corey: Do you remember if we have this documented on our site somewhere for our
developers? New folks wouldn't have gotten this email (since we dont' have
archives). Anyways, if we dont' have it documented, we need to get with devrel
and *make sure* we have it documented on our project page or on theirs. I'm
guessing this is more of an issue where we need this on our page. :-)
So let's wait for my notebook get back.
Ok. will close the bug