-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512,SHA1 I am transitioning GPG keys from an old 1024-bit DSA key to a new 4096-bit RSA key. The old key will continue to be valid for some time, but I prefer all new correspondance to be encrypted in the new key, and will be making all signatures going forward with the new key. This transition document is signed with both keys to validate the transition. If you have signed my old key, I would appreciate signatures on my new key as well, provided that your signing policy permits that without reauthenticating me. The old key, which I am transitional away from, is: pub 1024D/CBFB18F7 2007-07-07 Key fingerprint = 8DE9 8817 AF3E 4D47 7893 7502 7B95 A97E CBFB 18F7 uid Stefano Rivera (Personal Key) uid Stefano Rivera The new key, to which I am transitioning, is: pub 4096R/CD92D072 2010-10-13 Key fingerprint = 8B5B D33F 542B C3FC 03D5 5A9A 5110 6DF5 CD92 D072 uid Stefano Rivera uid Stefano Rivera To fetch the full new key from a public key server using GnuPG, run: gpg --keyserver keys.gnupg.net --recv-key 51106DF5CD92D072 If you have already validated my old key, you can then validate that the new key is signed by my old key: gpg --check-sigs 51106DF5CD92D072 If you then want to sign my new key, a simple and safe way to do that is by using caff (shipped in Debian as part of the "signing-party" package) as follows: caff 51106DF5CD92D072 Please contact me via e-mail at if you have any questions about this document or this transition. Stefano Rivera http://tumbleweed.org.za/ H: +27 21 465 6908 C: +27 72 419 8559 UCT: x3127 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCgAGBQJMtXCPAAoJEACQ/CG1zRrMQZMP/RCqNMTH1EG+1Pc+zMT5KA9C hdipakBvxEFGQndZJ/KykR1bo9L8PGkAfqZC6X/7RgPEluXjouLNWmwghTui843k nsxnzgXUvI+L9MH0QC6XnXaj60EAufumb/NQcvFNy7AprJsEClnCOv8w4pwyLu9w LocYdL7Bqh13nfGgpRUi7p60cC/dwfSmyiaDIGqw06dQhtgThp4R7yf6QAbA3DA9 iT8v1hV+FjQg2WvUgvhyweJNefYYSFXQK+OdEqQsci3c0pyXdWH03ZOQqFzNrspc UrJ6uON5vkKemn09lH9bWbWi45CMal1sDV0ghaKbFvZNQ8x7/UelWIp3yXGvtyaI ccZpd0ZGsrwgEarm1QHF3pGYuPug5HGKQ/3VQ0jXEEnvdXrV4zhOz9zDS97i0AdR AB531KkIHuXhb89rRiF1DaTbOQ72fi+Jf99PnJe+UjN2yyEcDwb0mCQNybAPkkrZ O51nCnL+jDreKKTJfMHwSUtGypHVMKpmxQXFeFsLUGsE8cMzI5kMkV8AEqkg68b6 ZvRrlkIxrSthAy9qphCfQmzK5mf2rznWtnALRBbp4Aa0aGBKvb5P6VWBVEdtAXOP UDevhKsZeJisH4/Cvc8yrCgdkz9gVWzspyRktEurW5IeofUOnpgK5UEF/0EK8O5m Ms485RjR7j+CvON61N7/iEYEARECAAYFAky1cI8ACgkQe5Wpfsv7GPfHBgCfSyxM v+sadeBLnswy78f47RZVapcAn3YHCLHQ2u8mAWlCAjn3p47GmP+w =Tctg -----END PGP SIGNATURE-----