GNU bug report logs - #35060
26.1; Incorrect OpenPGP key on Emacs site

Previous Next

Full log

View this message in rfc822 format

From: Andrew Luke Nesbit <ullbeking <at> andrewnesbit.org>
To: Alan Third <alan <at> idiocy.org>
Cc: 35060 <at> debbugs.gnu.org, Eli Zaretskii <eliz <at> gnu.org>
Subject: bug#35060: 26.1; Incorrect OpenPGP key on Emacs site
Date: Tue, 2 Apr 2019 07:13:20 +0100

On 31/03/2019 17:23, Alan Third wrote:
> On Sun, Mar 31, 2019 at 04:16:52PM +0100, Andrew Luke Nesbit wrote:
>> The public key server network has the key marked as revoked:
>> https://keyserver.escomposlinux.org/pks/lookup?search=Nicolas+Petton&fingerprint=on&op=vindex
> 
> You’re looking at the wrong key, I think.

I am indeed looking at the wrong key on the key server.  Nevertheless,
there is still a problem.

The user is instructed to √erify the signature of the download, but the
information about who it's signed by is misleading.  The key that signs
the signature for releases >= 26.1 is not available as far as I can tell.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.