add /gpg and update /contact
[~bandali/bndl.org] / static / key-transition-2018-10-17.txt
diff --git a/static/key-transition-2018-10-17.txt b/static/key-transition-2018-10-17.txt
new file mode 100644 (file)
index 0000000..a3fa3da
--- /dev/null
@@ -0,0 +1,128 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+            _______________________________________________
+
+             GPG KEY TRANSITION STATEMENT FOR AMIN BANDALI
+            _______________________________________________
+
+
+I have created a new GPG key and will be transitioning away from my old
+key.  The old key has not been compromised and will continue to be valid
+for some time, but I prefer all future correspondence to be encrypted to
+the new key, and will be making signatures with the new key going
+forward.
+
+This message is signed by both keys to certify the transition.  My new
+key is signed by the old one.  If you have signed my old key, I would
+appreciate signatures on my new key as well, provided that your signing
+policy permits that without re-authenticating me.
+
+The old key, which I am transitioning away from, is:
+
+,----
+| pub   rsa4096 2018-08-05 [C] [expires: 2018-11-16]
+|       CDDE 75F9 0353 8E71 813C  DA27 D1FB A366 27D6 5876
+| uid           [ultimate] Amin Bandali <amin@gnu.org>
+| uid           [ultimate] Amin Bandali <amin@aminb.org>
+| uid           [ultimate] Amin Bandali <mab@gnu.org>
+| uid           [ultimate] Amin Bandali <aminb@gnu.org>
+| sub   rsa4096 2018-08-05 [S] [expires: 2018-11-16]
+|       E14F 56EE 1338 901E A8A8  D2DD 91A9 6FF7 FEF6 BEB4
+| sub   rsa4096 2018-08-05 [E] [expires: 2018-11-16]
+|       F9B3 BA24 31A0 9B38 31A3  42EF 1F29 83A9 9A69 D453
+| sub   rsa4096 2018-08-05 [A] [expires: 2018-11-16]
+|       4FB5 D03D A65E 8DA3 39BE  5EDD 6DC3 8F21 4E4B AAA0
+`----
+
+The new key, to which I am transitioning, is:
+
+,----
+| pub   rsa4096 2018-10-17 [C] [expires: 2020-10-16]                                                    
+|       BE62 7373 8E61 6D6D 1B3A  08E8 A21A 0202 4881 6103
+| uid           [ultimate] Amin Bandali <bandali@gnu.org>
+| sub   rsa4096 2018-10-17 [S] [expires: 2020-10-16]
+|       39B3 3C8D 9448 0D2D DCC2  A498 8B44 A0CD C7B9 56F2
+| sub   rsa4096 2018-10-17 [E] [expires: 2020-10-16]
+|       43ED 5F7C F5EC CBDF 2552  FE98 1D52 D14E BCF3 BE08
+| sub   rsa4096 2018-10-17 [A] [expires: 2020-10-16]
+|       70FB 9AAD 5240 2841 2B14  8685 4040 DFEC 6EC1 3F3A
+`----
+
+You can get more information about the key from <https://aminb.org/gpg>,
+and directly download it from <https://aminb.org/0xA21A020248816103.txt>
+or from any public key server using GnuPG:
+
+,----
+| gpg --keyserver keys.gnupg.net --recv-key 0xA21A020248816103
+`----
+
+If you already know my old key, you can now verify that the new key is
+signed by the old one:
+
+,----
+| gpg --check-sigs 0xA21A020248816103
+`----
+
+If you are satisfied that you've got the right key, I would appreciate
+it if you would sign my key:
+
+,----
+| gpg --sign-key 0xA21A020248816103
+`----
+
+You can either upload your signatures to a public keyserver directly:
+
+,----
+| gpg --keyserver keys.gnupg.net --send-key 0xA21A020248816103
+`----
+
+Or, preferably, write to me at <bandali@gnu.org> (possibly encrypted)
+the output from:
+
+,----
+| gpg --armor --export 0xA21A020248816103
+`----
+
+If you'd like any further verification or have any questions about the
+transition please contact me directly.
+
+To verify the integrity of this statement:
+
+,----
+| wget -qO - https://aminb.org/key-transition-2018-10-17.txt | gpg --verify
+`----
+
+One last note: though the new key is currently set to expire on
+2020-08-04, I expect to periodically extend it further into the future
+so long as I'm using it or so long as I haven't revoked it.
+
+  -amin
+-----BEGIN PGP SIGNATURE-----
+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+=RQfQ
+-----END PGP SIGNATURE-----