From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 31 03:17:51 2019 Received: (at submit) by debbugs.gnu.org; 31 Mar 2019 07:17:51 +0000 Received: from localhost ([127.0.0.1]:37747 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAUj0-0001YH-Lc for submit@debbugs.gnu.org; Sun, 31 Mar 2019 03:17:51 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42266) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hANXD-00079u-Hh for submit@debbugs.gnu.org; Sat, 30 Mar 2019 19:37:12 -0400 Received: from lists.gnu.org ([209.51.188.17]:44272) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hANX8-0006Vf-A3 for submit@debbugs.gnu.org; Sat, 30 Mar 2019 19:37:06 -0400 Received: from eggs.gnu.org ([209.51.188.92]:56646) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hANX7-0008Nj-A6 for bug-gnu-emacs@gnu.org; Sat, 30 Mar 2019 19:37:06 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_NONE, URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hANX6-0006UV-3b for bug-gnu-emacs@gnu.org; Sat, 30 Mar 2019 19:37:05 -0400 Received: from fbo-2.mxes.net ([205.237.194.111]:10069) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hANX5-0006Hz-JY for bug-gnu-emacs@gnu.org; Sat, 30 Mar 2019 19:37:04 -0400 Received: from smtp-out-1.mxes.net (smtp-out-1.mxes.net [205.237.194.119]) by fbi-2.mxes.lan (Postfix) with ESMTP id 8085A27557 for ; Sat, 30 Mar 2019 19:36:56 -0400 (EDT) Received: from Customer-MUA (mua.mxes.net [10.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 70B6B27541 for ; Sat, 30 Mar 2019 19:36:54 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=andrewnesbit.org; s=default; t=1553989015; bh=BvOXYAgcT4m3rbaIve8Q12C5EYkBgts3geMPxGuJ1zE=; h=To:From:Subject:Date:From; b=UXPY886OJ6VeT0fmbX901F5HsEiz1ToIuRZX18I1aOnxFa8ufL2qvIdQ2rlL4+Oez HiZo+lueewTy3BoGmNTl8HushEgc4wgabwRyimTocdV5sEmyL8Pn6/FKyxi/BcfvZ3 KtafUBx5aRLiUNiAyRI9eZeoxvMXyC7Oe6QPdtdc= To: bug-gnu-emacs@gnu.org From: Andrew Luke Nesbit Subject: 26.1; Incorrect OpenPGP key on Emacs site Openpgp: preference=signencrypt Message-ID: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> Date: Sat, 30 Mar 2019 23:36:52 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Sent-To: X-Sender: tuffmail.com X-detected-operating-system: by eggs.gnu.org: FreeBSD 9.x [fuzzy] X-Received-From: 205.237.194.111 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 31 Mar 2019 03:17:49 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) At https://www.gnu.org/software/emacs/download.html the source tarballs are said to be signed with "the GPG key from Nicolas Petton [...] D405 AA2C 862C 54F1 7EEE 6BE0 E8BC D786 6AFC F978 (since 26.1), which can be found in the GNU keyring." Not only is this key not in the GNU keyring, but it has also been revoked from the public key server network. In GNU Emacs 26.1 (build 1, x86_64-pc-linux-gnu) of 2019-03-30 System Description: Debian GNU/Linux 9.8 (stretch) From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 31 11:09:26 2019 Received: (at 35060) by debbugs.gnu.org; 31 Mar 2019 15:09:26 +0000 Received: from localhost ([127.0.0.1]:38408 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAc5O-0004Ol-5c for submit@debbugs.gnu.org; Sun, 31 Mar 2019 11:09:26 -0400 Received: from eggs.gnu.org ([209.51.188.92]:39426) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAc5L-0004OW-U4 for 35060@debbugs.gnu.org; Sun, 31 Mar 2019 11:09:24 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:57207) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hAc5G-0000mY-LO; Sun, 31 Mar 2019 11:09:18 -0400 Received: from [176.228.60.248] (port=2825 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1hAc5G-0005Qt-23; Sun, 31 Mar 2019 11:09:18 -0400 Date: Sun, 31 Mar 2019 18:09:25 +0300 Message-Id: <83y34vgjx6.fsf@gnu.org> From: Eli Zaretskii To: Andrew Luke Nesbit In-reply-to: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> (message from Andrew Luke Nesbit on Sat, 30 Mar 2019 23:36:52 +0000) Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) > From: Andrew Luke Nesbit > Date: Sat, 30 Mar 2019 23:36:52 +0000 > > At https://www.gnu.org/software/emacs/download.html the source > tarballs are said to be signed with "the GPG key from Nicolas > Petton [...] D405 AA2C 862C 54F1 7EEE 6BE0 E8BC D786 6AFC > F978 (since 26.1), which can be found in the GNU keyring." > > > Not only is this key not in the GNU keyring, but it has also > been revoked from the public key server network. See http://lists.gnu.org/archive/html/emacs-devel/2019-03/msg00732.html From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 31 11:17:04 2019 Received: (at 35060) by debbugs.gnu.org; 31 Mar 2019 15:17:04 +0000 Received: from localhost ([127.0.0.1]:38413 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAcCm-0004bR-03 for submit@debbugs.gnu.org; Sun, 31 Mar 2019 11:17:04 -0400 Received: from smtp-out-1.mxes.net ([205.237.194.119]:59103) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAcCk-0004as-Kt for 35060@debbugs.gnu.org; Sun, 31 Mar 2019 11:17:03 -0400 Received: from Customer-MUA (mua.mxes.net [10.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 5DEC8275CE; Sun, 31 Mar 2019 11:16:54 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=andrewnesbit.org; s=default; t=1554045417; bh=ndw0I6RKqlKjY5cKWN+qyP5MdMoQqqQMesVF2FaykFk=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=pLrFJ3X3CvQwkBe2eQyWPVn3ckdAyEqbSTRDeuY5UHTvFBLUA0AS1D0az4bDyFNAI 885m9h+VYla8/hr5OTPj14AdMlQZ8vpqAdnAL6DeWsNEu+MWh1+jmM5UpN/w0SPmxp jPgwKCr+tSVPrbGvY97/A4hRFSo/FVGaKhbSRsvM= Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site To: Eli Zaretskii References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> <83y34vgjx6.fsf@gnu.org> From: Andrew Luke Nesbit Openpgp: preference=signencrypt Message-ID: Date: Sun, 31 Mar 2019 16:16:52 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <83y34vgjx6.fsf@gnu.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Sent-To: X-Sender: tuffmail.com X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On 31/03/2019 16:09, Eli Zaretskii wrote: >> From: Andrew Luke Nesbit >> Date: Sat, 30 Mar 2019 23:36:52 +0000 [...] >> Not only is this key not in the GNU keyring, but it has also >> been revoked from the public key server network. > > See > > http://lists.gnu.org/archive/html/emacs-devel/2019-03/msg00732.html The public key server network has the key marked as revoked: https://keyserver.escomposlinux.org/pks/lookup?search=Nicolas+Petton&fingerprint=on&op=vindex Why is it then still listed on the website as something that can be depended on? I cannot see how it makes sense to refer to this particular key. From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 31 12:23:34 2019 Received: (at 35060) by debbugs.gnu.org; 31 Mar 2019 16:23:34 +0000 Received: from localhost ([127.0.0.1]:38433 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAdF7-00068b-Ot for submit@debbugs.gnu.org; Sun, 31 Mar 2019 12:23:33 -0400 Received: from mail-wm1-f49.google.com ([209.85.128.49]:51651) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hAdF6-00068P-Gk for 35060@debbugs.gnu.org; Sun, 31 Mar 2019 12:23:32 -0400 Received: by mail-wm1-f49.google.com with SMTP id 4so7659184wmf.1 for <35060@debbugs.gnu.org>; Sun, 31 Mar 2019 09:23:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20161025; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=ac5SwoXOfRn3ZISSusJVXABjtGqdWFV46JF+BW8w/R0=; b=Zs2HBQsUJXt84guTezjHzlCYyP+BWcjIWj2u2mpgKTOcHZkrrVS8JnjGty+R82+EhN O2iNkmUc2IED1nCV3VHq0pTCWeGoXXreLMFK+2WiPdmZNb9XRg+HPnh+m4G/WnfoKSSL Bh2ohD5U0upbqaHxMnnetugYgONDdD4Z27mf97yBoat0aCF2jhS/ViVFbVUtjQ9+8WfE dwJBH/FkbGnT/w2TyIFqpkiVww6JZUfXt23fQnlQNsaY9awCHp7Ol8KGgechO71PFUbe TVhSArQZXbD/2uDiVCw7zapijr1VgI5sXQcxJPhNlEw4sMF9GDrExmAuywqLDk8yWtqN 91bw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:date:from:to:cc:subject:message-id :references:mime-version:content-disposition :content-transfer-encoding:in-reply-to:user-agent; bh=ac5SwoXOfRn3ZISSusJVXABjtGqdWFV46JF+BW8w/R0=; b=Jt4Zk7GUK0K/pggNpuHLoVUdh0KCw6M+LQENn1pyLBpKR6Hy2ygj6eoOuOMJLkKgq9 W4yZ7ACcpDfK22XhMzWi7RHSIbbOH/asCksa2WeQ02pkqDTYENlfEEDZ4SY5TTPaSgEF v2Vgb89KwU7qhf1zfyp5YH8z4Hm+PlIpyZvr+W3ScKVGIveLL/1hSqDXbKUY37nrkeND SPwBkxMn1jRV3qlWQkfe5xEU5ANlbPjCt5cjWr5wp/R41sUl803VVJ+N8ThrbZ3MjhHz E00OuIm2u3Fvioe/r8PyEvv5Roo3WjLTqe+lDIWeXnff4C5R76Uw9HMe4YWbMXp3LANr Kz+g== X-Gm-Message-State: APjAAAXXEsv4Yvw8j2MInQs29g2C8xeD44UUC5R5xA8mgTp7cgiq/W1S QHTv7UHUgsimJMly8kdGPcE= X-Google-Smtp-Source: APXvYqyyj/fgV+PQiNtAK2kTlbHuPvYuR/Bm2O91EBlzWoyCq1JZcAF8yjA6zfJW7z62CywdwcpDvQ== X-Received: by 2002:a1c:730c:: with SMTP id d12mr9347023wmb.47.1554049406517; Sun, 31 Mar 2019 09:23:26 -0700 (PDT) Received: from breton.holly.idiocy.org (ip6-2001-08b0-03f8-8129-6c8e-2e7d-cd87-789a.holly.idiocy.org. [2001:8b0:3f8:8129:6c8e:2e7d:cd87:789a]) by smtp.gmail.com with ESMTPSA id z7sm6471147wml.40.2019.03.31.09.23.25 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 31 Mar 2019 09:23:25 -0700 (PDT) Date: Sun, 31 Mar 2019 17:23:23 +0100 From: Alan Third To: Andrew Luke Nesbit Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site Message-ID: <20190331162323.GB67766@breton.holly.idiocy.org> References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> <83y34vgjx6.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.11.3 (2019-02-01) X-Spam-Score: 0.3 (/) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org, Eli Zaretskii X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Sun, Mar 31, 2019 at 04:16:52PM +0100, Andrew Luke Nesbit wrote: > The public key server network has the key marked as revoked: > https://keyserver.escomposlinux.org/pks/lookup?search=Nicolas+Petton&fingerprint=on&op=vindex You’re looking at the wrong key, I think. -- Alan Third From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 02 02:13:31 2019 Received: (at 35060) by debbugs.gnu.org; 2 Apr 2019 06:13:31 +0000 Received: from localhost ([127.0.0.1]:40276 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hBCfq-0004dL-Ob for submit@debbugs.gnu.org; Tue, 02 Apr 2019 02:13:30 -0400 Received: from smtp-out-1.mxes.net ([205.237.194.119]:47775) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hBCfo-0004d4-41 for 35060@debbugs.gnu.org; Tue, 02 Apr 2019 02:13:29 -0400 Received: from Customer-MUA (mua.mxes.net [10.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 5478827552; Tue, 2 Apr 2019 02:13:21 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=andrewnesbit.org; s=default; t=1554185602; bh=OmQnxWWpYFUi1NFfzTgx/H5iFNZC8X5NSKPiRzBKMpg=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=MzrqM4zF5JjsRfYIpJ/Us/fAhBZlgzSO6spWl2VN85qvs2WdW6X5zBpf10sHWvEHi eZ3ZSjCTCBwk1TasbHIup60M+mYk/TVHTS6nEgP03C+2GHJfJhyxtRLliUz+kh+kIX +Q7UQUaZabTIQ+ElPNVjeShm855LqbaUyfteA3sk= Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site To: Alan Third References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> <83y34vgjx6.fsf@gnu.org> <20190331162323.GB67766@breton.holly.idiocy.org> From: Andrew Luke Nesbit Openpgp: preference=signencrypt Message-ID: Date: Tue, 2 Apr 2019 07:13:20 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <20190331162323.GB67766@breton.holly.idiocy.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable X-Sent-To: X-Sender: tuffmail.com X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org, Eli Zaretskii X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On 31/03/2019 17:23, Alan Third wrote: > On Sun, Mar 31, 2019 at 04:16:52PM +0100, Andrew Luke Nesbit wrote: >> The public key server network has the key marked as revoked: >> https://keyserver.escomposlinux.org/pks/lookup?search=3DNicolas+Petton= &fingerprint=3Don&op=3Dvindex >=20 > You=E2=80=99re looking at the wrong key, I think. I am indeed looking at the wrong key on the key server. Nevertheless, there is still a problem. The user is instructed to =E2=88=9Aerify the signature of the download, b= ut the information about who it's signed by is misleading. The key that signs the signature for releases >=3D 26.1 is not available as far as I can tel= l. From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 02 09:59:46 2019 Received: (at 35060) by debbugs.gnu.org; 2 Apr 2019 13:59:46 +0000 Received: from localhost ([127.0.0.1]:41412 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hBJx4-0001R3-0K for submit@debbugs.gnu.org; Tue, 02 Apr 2019 09:59:46 -0400 Received: from mail-it1-f179.google.com ([209.85.166.179]:55136) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hBJx1-0001Qp-AN for 35060@debbugs.gnu.org; Tue, 02 Apr 2019 09:59:44 -0400 Received: by mail-it1-f179.google.com with SMTP id a190so3721132ite.4 for <35060@debbugs.gnu.org>; Tue, 02 Apr 2019 06:59:43 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=kr7fmGzI8N6dyKn/AEIt68wrRE/biXjv3Pf6CvmQrtc=; b=fIU4SKDcV6ByYkjG1yFt7EQLlwtEzVMkaSwQ9b2yg4unF4V5zGb62NKy9r1dRuB861 yhl+cEDF1Uplx2a9qRMQPqpGibcWbrnD9bAGXHTHqHxr6zGBu7TtuCEl5HvwMdUSv7nu 0SE9dTIObBVFFT/sY+53f9raVZvJR6L/VqU8nx5p7RDPCvjmB6s1ddlBMPhu4M0WeYxu CevzIrM5SbwU2IKkWRQlok/fSW/8XrN6LZugGoQb9yTUChP843oZfVyvCAWqEvUkyBJ3 OhKBdq11XrAiWV/kSsNvNoaOBbzBdIIUHjE+DUV1c1F+IHOhavlg3f91M9Q2E78dUgww 7X7A== X-Gm-Message-State: APjAAAWnBpPIZTQYwA+jJ03XtNczTq3O/sx10WFMzj7EsZ1kgRXBYK+D Rh7XHis9r2jWKJex1DytDo5AqaazEblyuVuTZaY= X-Google-Smtp-Source: APXvYqxb7/94wZlRuoiXla1Q1uzXmuxj6CxpPp/BM1ukUGhuVSV0Wx/0qHhSSpqRwcoqHrGfv06aZVYl/YfwR6elxRo= X-Received: by 2002:a02:ac9a:: with SMTP id x26mr12591560jan.129.1554213577517; Tue, 02 Apr 2019 06:59:37 -0700 (PDT) MIME-Version: 1.0 References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> <83y34vgjx6.fsf@gnu.org> <20190331162323.GB67766@breton.holly.idiocy.org> In-Reply-To: From: Alan Third Date: Tue, 2 Apr 2019 14:59:25 +0100 Message-ID: Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site To: Andrew Luke Nesbit Content-Type: multipart/alternative; boundary="000000000000316de105858c8c55" X-Spam-Score: 0.3 (/) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org, Eli Zaretskii X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --000000000000316de105858c8c55 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, 2 Apr 2019, 07:13 Andrew Luke Nesbit, wrote: > > The user is instructed to =E2=88=9Aerify the signature of the download, b= ut the > information about who it's signed by is misleading. The key that signs > the signature for releases >=3D 26.1 is not available as far as I can tel= l. > It's actually a subkey, so if you updated Nicolas's key from the server it should verify correctly. I do agree that it's confusing, though. > --000000000000316de105858c8c55 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Tue, 2 Apr 2019, 07:13 Andrew Luke Nesbit, <ullbeking@andrewnesbit.org>= ; wrote:

The user is instructed to =E2=88=9Aerify the signature of the download, but= the
information about who it's signed by is misleading.=C2=A0 The key that = signs
the signature for releases >=3D 26.1 is not available as far as I can te= ll.

It's actually a subkey, so if you updated Nicolas's key from the= server it should verify correctly. I do agree that it's confusing, tho= ugh.
--000000000000316de105858c8c55-- From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 22 17:50:52 2021 Received: (at 35060) by debbugs.gnu.org; 22 Sep 2021 21:50:52 +0000 Received: from localhost ([127.0.0.1]:51999 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mTA8h-0003G4-QD for submit@debbugs.gnu.org; Wed, 22 Sep 2021 17:50:52 -0400 Received: from quimby.gnus.org ([95.216.78.240]:34880) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mTA8f-0003Fm-Nf for 35060@debbugs.gnu.org; Wed, 22 Sep 2021 17:50:50 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :In-Reply-To:Date:References:Subject:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=QfzTdUtQbyUaDN0nMi614Wgx+ROLD6caP8IZWSndPVI=; b=fmedbvDEpHtJD+ZUCnVvmv3olD ARSAWN2ukvZtqvaejXZxbQuubmigTtq/BW6pO4eviGNZAmPEwfYAELDD9OyJz0xFjlD7Nbo8bfK50 TfdDhmlwAF/tV7iWP6Vu+fXPaIFTsC5J9b0Wio6amjwGJhACp7D74sF2QuMzRCaQ8toY=; Received: from [84.212.220.105] (helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mTA8S-0007ij-KI; Wed, 22 Sep 2021 23:50:41 +0200 From: Lars Ingebrigtsen To: Alan Third Subject: Re: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site References: <093b9afc-09a9-dc8b-c8c2-461251439ebe@andrewnesbit.org> <83y34vgjx6.fsf@gnu.org> <20190331162323.GB67766@breton.holly.idiocy.org> X-Now-Playing: Pet Shop Boys's _I don't wanna_: "I Don't Wanna (David Jackson Remix Two)" Date: Wed, 22 Sep 2021 23:50:35 +0200 In-Reply-To: (Alan Third's message of "Tue, 2 Apr 2019 14:59:25 +0100") Message-ID: <87czp0qnys.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Alan Third writes: > On Tue, 2 Apr 2019, 07:13 Andrew Luke Nesbit, > wrote: > > The user is instructed to √erify the signature of the download, but the > information about who it's signed [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 35060 Cc: 35060@debbugs.gnu.org, Eli Zaretskii , Andrew Luke Nesbit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Alan Third writes: > On Tue, 2 Apr 2019, 07:13 Andrew Luke Nesbit, > wrote: > > The user is instructed to =E2=88=9Aerify the signature of the download, = but the > information about who it's signed by is misleading. The key that signs > the signature for releases >=3D 26.1 is not available as far as I can te= ll. > > It's actually a subkey, so if you updated Nicolas's key from the server it > should verify correctly. I do agree that it's confusing, though. So if I understand correctly, there isn't anything to fix here, and I'm closing this bug report. (If I'm mistaken, and there's something that can be done to make this less confusing, please respond to the debbugs address and we'll reopen.) --=20 (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 22 17:50:55 2021 Received: (at control) by debbugs.gnu.org; 22 Sep 2021 21:50:55 +0000 Received: from localhost ([127.0.0.1]:52002 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mTA8l-0003GN-1Y for submit@debbugs.gnu.org; Wed, 22 Sep 2021 17:50:55 -0400 Received: from quimby.gnus.org ([95.216.78.240]:34888) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mTA8j-0003Ft-FN for control@debbugs.gnu.org; Wed, 22 Sep 2021 17:50:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=s6zXn1Aw8HBR2xWg/CDA5uF6hrplZCcADVjevDBSc1A=; b=Cza06WXdPo0/cWOIoNWiKvr+3R dSs23DncriPpyL3vjMbvVG3XTDjb4GQzCfAvHbp2r3e0PKPhw6nBzgUZnmMTwy6/4KCRcC2wwZSXw iDUtvVXB80c+rP6Hmk0CIqBRftClHxy2YGGC3MZld0icmwHTDn6OOfb1OMrZFgh7I22o=; Received: from [84.212.220.105] (helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mTA8a-0007iq-4I for control@debbugs.gnu.org; Wed, 22 Sep 2021 23:50:47 +0200 Date: Wed, 22 Sep 2021 23:50:43 +0200 Message-Id: <87bl4kqnyk.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #35060 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: close 35060 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) close 35060 quit From unknown Sun Sep 07 16:50:21 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 21 Oct 2021 11:24:09 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator