Opened 7 years ago

Closed 7 years ago

#5474 closed enhancement (implemented)

Add Tails signing key to key page

Reported by: ioerror Owned by: phobos
Priority: Medium Milestone:
Component: Webpages/Website Version:
Severity: Keywords: tails security gpg
Cc: phobos, weasel Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We should add the Tails signing key fingerprint to this page:
https://www.torproject.org/docs/signing-keys.html.en

This is the key:
https://tails.boum.org/tails-signing.key

This would be the correct addition to the page:

pub   4096R/BE2CD9C1 2010-10-07 [expires: 2012-10-06]
      Key fingerprint = 0D24 B36A A9A2 A651 7878  7645 1202 821C BE2C D9C1
uid                  Tails developers (signing key) <tails@boum.org>
uid                  T(A)ILS developers (signing key) <amnesia@boum.org>

Child Tickets

Change History (9)

comment:1 Changed 7 years ago by ioerror

Cc: weasel added

It might make sense to create a package like debian-keyring for our set of keys, perhaps something like torproject-keyring.

Weasel - do you think that would be a useful thing for users of our deb repo? How does Debian keep track of that package?

comment:3 Changed 7 years ago by phobos

Priority: majornormal

Why should we add the tails signing key to our page?

comment:4 in reply to:  3 Changed 7 years ago by ioerror

Replying to phobos:

Why should we add the tails signing key to our page?

We suggest people use Tails and if they look at our website, they'll not find the proper keying info.

comment:5 Changed 7 years ago by Sebastian

Do we offer tails downloads from our website? Iff we do, we should add the keys imo.

comment:6 Changed 7 years ago by arma

We don't offer tails from our website. But I think we should add the key anyway. Tails is on our projects page. Listing their signing key is cheap and offers another link in the trust chain.

comment:7 Changed 7 years ago by Sebastian

hrm, ok. I guess I was worried it'd become even more confusing, but seeing how we have roughly ten million things on that page already that'd hardly be the case.

comment:8 Changed 7 years ago by Sebastian

That said, their key expires in a few months. This means we'll get out of sync on stuff.

comment:9 Changed 7 years ago by phobos

Resolution: implemented
Status: newclosed

done, see revision 25568

Note: See TracTickets for help on using tickets.