[Tails-dev] Fake keys for Tails developers' email address

Supprimer ce message

Répondre à ce message
Auteur: intrigeri
Date:  
À: tails-dev, tor-talk
Sujet: [Tails-dev] Fake keys for Tails developers' email address
Hi,

u. (Cc'd) has notified me of two fake keys with Tails developers'
email addresses:

EB24 9600 79A3 E2B9 3BFE 48B5 05F8 BB78 B38F 4311
C3BA A4BF E369 B2B8 6018 B515 0E08 AC78 06C0 69C8

These are *not* genuine. Don't trust them. Our real keys are
documented on https://tails.boum.org/doc/about/openpgp_keys/.

Interestingly, the 2nd one has been created two days before the fake
key Erinn discovered [1] two months ago, and has the same lifetime (4
years). I guess one might find more such keys by looking at keys
created in the same period.

[1] https://lists.torproject.org/pipermail/tor-talk/2014-March/032308.html

Cheers,
--
intrigeri
| GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
| OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc