aboutsummaryrefslogtreecommitdiff
path: root/www
diff options
context:
space:
mode:
authorLeah Rowe <info@minifree.org>2018-03-14 01:14:45 +0000
committerLeah Rowe <info@minifree.org>2018-03-14 01:14:45 +0000
commit4606722c5818b0927c1521293176cee522969258 (patch)
tree1b708fabe65c8772ef7850eb9d18d82a6b8c4bc2 /www
parent9050f300ef1440c66a026ff41a60926c907cda7c (diff)
downloadlibrebootfr-4606722c5818b0927c1521293176cee522969258.tar.gz
librebootfr-4606722c5818b0927c1521293176cee522969258.zip
Update download page to include the 16-digit GPG key (no pull request needed)
This was brought to our attention by attila_lendvai on #libreboot IRC. Essentially, the previous instruction was vulnerable to potential collision attacks. With this new instruction, it should be a bit safer. Since this is urgent, no pull request was issued. This has been committed to the repository directly, with consent from and_who on IRC.
Diffstat (limited to 'www')
-rw-r--r--www/download.md4
1 files changed, 3 insertions, 1 deletions
diff --git a/www/download.md b/www/download.md
index 5edaa4f4..245e1154 100644
--- a/www/download.md
+++ b/www/download.md
@@ -17,7 +17,9 @@ GPG signing key
Releases are signed with GPG.
- $ gpg --recv-keys 0x05E8C5B2
+ gpg --recv-keys 0x969A979505E8C5B2
+
+Full key fingerprint: CDC9 CAE3 2CB4 B7FC 84FD C804 969A 9795 05E8 C5B2
The GPG key can also be downloaded with this exported dump of the
pubkey: [lbkey.asc](lbkey.asc).