Re: [Qemu-devel] Reminder: don't trust 32-bit short IDs when using GPG!

2016-08-17 Thread Thomas Huth
On 10.06.2016 16:46, Peter Maydell wrote: > We've noticed recently that the GPG keyservers have fake keys for > some of the QEMU maintainers, which have keys which have been > deliberately constructed to have collisions on the 32-bit "short ID" > field which gpg shows you by default. > > (Example:

[Qemu-devel] Reminder: don't trust 32-bit short IDs when using GPG!

2016-06-10 Thread Peter Maydell
We've noticed recently that the GPG keyservers have fake keys for some of the QEMU maintainers, which have keys which have been deliberately constructed to have collisions on the 32-bit "short ID" field which gpg shows you by default. (Example: https://pgp.mit.edu/pks/lookup?op=vindex&search=0x143