On Thursday 27 November 2003 17:53, Camillo Särs wrote: > Hi, > > As far as I can tell, apt-secure would have protected against any > compromise of the archives in this hacking incident. That is, provided > that the developers keep their private keys secure. Unfortunately, 32 keys on the current keyring use possibly compromisable ElGamal keys or subkeys, according to http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000276.html Those affected, and the project's keyring master/mistress, may wish to consider revocations. - Joshua. -- Joshua Goodall <joshua@myinternet.com.au> Solutions Architect / Principal Security Architect myinternet Limited.
Attachment:
pgpT5BCTPoo8S.pgp
Description: signature