Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Clint Adams
On Wed, May 20, 2009 at 08:50:09PM +0200, Magnus Holmgren wrote: > Hmm, would that mean gpg --enable-dsa2 --cert-digest-algo SHA256 or > something? > Also, does gpg have an option to make it output the hash algorithms of key > (ID) signatures? I can't seem to find one. Feed a key to gpg --list-

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Magnus Holmgren
On onsdagen den 20 maj 2009, Jonathan McDowell wrote: > My attitude to this is that yes, people should be considering replacing > their existing GPG keys with something stronger using SHA256 or better > for signatures (and a keysize of greater than 1024 bits). Hmm, would that mean gpg --enable-ds

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Jonathan McDowell
On Wed, May 20, 2009 at 07:43:53PM +1000, Ben Finney wrote: > Jonathan McDowell writes: > > * Replacement of the old key with the new one should not cause any > > other key to no longer be in Debian's Web of Trust nor strongly > > connected subset. > > Is there a simple way of checking whether th

Re: Notes from keyring-maint; end of the world not predicted

2009-05-20 Thread Ben Finney
Jonathan McDowell writes: > * Replacement of the old key with the new one should not cause any > other key to no longer be in Debian's Web of Trust nor strongly > connected subset. Is there a simple way of checking whether this is true for a given key? > * Replacement of the old key with the ne