-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1,SHA256 I am transitioning GPG keys from an old 1024-bit DSA key to a new 4096-bit RSA key. The old key will continue to be valid for some time, but I prefer all new correspondance to be encrypted in the new key, and will be making all signatures going forward with the new key. This transition document is signed with both keys to validate the transition. If you have signed my old key, I would appreciate signatures on my new key as well, provided that your signing policy permits that without reauthenticating me. The old key, which I am transitioning away from, is: pub 1024D/86BC2A50 2006-10-23 Key fingerprint = D266 A2CD AA29 DC15 AE70 22C8 9D78 D711 86BC 2A50 uid Luca Falavigna uid Luca Falavigna uid Luca Falavigna sub 2048g/4EC17ED6 2006-10-23 The new key, to which I am transitioning, is: pub 4096R/EBE2F31F 2010-10-13 Key fingerprint = DDC5 3E51 30FD 0822 3F98 9456 4908 6AD3 EBE2 F31F uid Luca Falavigna uid Luca Falavigna uid Luca Falavigna sub 4096R/DEE6EDF2 2010-10-13 To fetch the full new key from a public key server using GnuPG, run: gpg --keyserver keys.gnupg.net --recv-key 49086AD3EBE2F31F If you have already validated my old key, you can then validate that the new key is signed by my old key: gpg --check-sigs 49086AD3EBE2F31F If you then want to sign my new key, a simple and safe way to do that is by using caff (shipped in Debian as part of the "signing-party" package) as follows: caff 49086AD3EBE2F31F otherwise, you can use gpg directly: gpg --sign-key 49086AD3EBE2F31F Please contact me via e-mail at if you have any questions about this document or this transition. Yours faithfully, Luca Falavigna -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAky2EEYACgkQnXjXEYa8KlCvGQCdEApb4CC2o9vzuiD2esUdp7/K n44AniAqZ0zn37VseNSCw8GsjEHNrbOkiQIcBAEBCAAGBQJMthBGAAoJEEkIatPr 4vMf9EwP/iS87fsV7J+CU3mzJPpzwJrRYbD7Ku33n2yzLgWVW1EjBEH/GK4XK9oF Rwo9OqrWDlrAcR37RCEJTnMCrNjuxSHLHhrxggDWJa+tcsSlRT+Z7apbCJFHAK0o 7unoYiOcYgl9Jh8Py3bpOmZocNq6s8tMHxcNxGofxEiojCJ4cxm/vf2YkhXABcfW OW6FIYaUjhknMavu0MaycA624rPeaJftmCvpPZwR5zOCEyGQTb2XhwzOfDAO2elE rT61XLcu7OZjz4zsJodC4j/0ntMOBQczsQGsK5hGazoDx5ja8MYlSVvQ8gY2VW71 ngvFvtZUkm8H3Ykf/T8yH5+FWkX2tDejl0nAp7ABEAivIcZRiJqQ5M9bApsgQgxI mF9ylpjKrhTeUoNua34Lzw3Ydud+G+MZtJ/7GC9jULmU0OT3Wk2P+GBqv8DVvau+ NQmyk5xCDVntwADvb6DConxxNtTlfnOQir9cpTxxndw38y9C2TG+mGEOBu5pg5kK 4saa05Egpo94pslwjG1XeJtN1ONCUzAsa/caW0d+8wkUuIPlr18nLL3DNvjP/Rao v2h5gK0dMIhvNz14I0GsclrP//7NlwADlYmLb8DR/pkd6sp/RHcILhwlltY8+8Ee 6ekBcyFcZsaCA5hlX2Xi8kd2Lve2Iba/3Rb/QpLf8vJxmX5Xilm/ =43Du -----END PGP SIGNATURE-----