jaonoctus · July 16, 2025 22:25 · jaonoctus · May 12, 2025 · ottosch · Jul 16, 2025
diff --git a/fwiw_pgp.asc b/fwiw_pgp.asc
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512

 Date: May 12, 2025
 Chaintip: 000000000000000000020f4edda4f3360a96d80c49e2c8590dadd02f8808a432

 For a number of reasons, I have recently set up a new OpenPGP key,
 and will be transitioning away from my old one.

 The old key will continue to be valid for some time, but I prefer all 
 future correspondence to come to the new one. I would also like this 
 new key to be re-integrated into the web of trust. This message is 
 signed by both keys to certify the transition.

 The old key was:

 pub   rsa4096/0x782C165A293D6E18 2022-04-05
      Key fingerprint = 6B45 7D06 0ACE 363C 9D67  D8E6 782C 165A 293D 6E18

 And the new key is:

 pub   ed25519/0xD8F31505B581D617 2025-05-06
      Key fingerprint = 7B69 6A61 6F73 1337 520B  8A19 D8F3 1505 B581 D617

 To fetch the full keys, you can simply do:

  curl -fsSL https://github.com/jaonoctus.gpg | gpg --import

 If you already know my old key, you can verify that the new key is 
 signed by the old one:

  gpg --check-sigs 0xD8F31505B581D617

 If you don't already know my old key, or you just want to be double
 extra paranoid, you can check the fingerprint against the one above:

  gpg --fingerprint 0xD8F31505B581D617

 If you are satisfied that you've got the right key, and the UIDs match
 what you expect, I'd appreciate it if you would sign my key:

  gpg --sign-key 0xD8F31505B581D617

 Lastly, if you could upload these signatures, i would appreciate it.
 You can either send me an e-mail with the new signatures: (if you have
 a functional MTA on your system):

  gpg --armor --export 0xD8F31505B581D617 | mail -s 'OpenPGP Signatures' [email protected]

 Or you can just upload the signatures to a public keyserver directly:

  gpg --keyserver keyserver.ubuntu.com --send-key 0xD8F31505B581D617

 Please let me know if there is any trouble, and sorry for the
 inconvenience.

 Best,
 jaonoctus

 -----BEGIN PGP SIGNATURE-----

 iQIzBAEBCgAdFiEEa0V9BgrONjydZ9jmeCwWWik9bhgFAmgiSbAACgkQeCwWWik9
 bhiJzg/9G65gEpwKung9DYzY/dkTyHl6dplnDxx7PNvr1EkoElC/QdXZO/Kx6mMv
 rGHZYhEDzSL9vM1zkaBjDCBuSp9ameCHBorfCwabjsz4CHmxr/ubdC02B4idpli2
 7ONSGUuzbEHsDbpY20I7mH9WsUsbmO+wyjUUqUuKmWZsjndpZ2ZrqwLbCYnjOoxK
 qM+w8x+ShuiZ+awoNTDCXVJ4vD2JlOGrDRiFuDkysOxQ7SBMJDdXbCNOtDM6rMzF
 Y8JZYR+VawkGh0ra/hzeaoKUECUWVmDS4wiFBxOEdU/CApMfsdcdqlBAs2vQ0Uim
 HA90cFFNNWTqqJgOgo5+5rK19N1drnrNYkdiilsfJIkg/kiEp6AWzFCjP0td4URK
 jAb57TxdU6iQ9tMMTP4Y2WVfMx5TgKn8asIi4sQ+PG9IBtLqnlp48l0y/V+kCUbs
 L3+lZD3dA5MU3lclM1J6273co2oCedCTQH2JS6bnkRvVUf6JuKXCHYe1Gi/2uigg
 Pd9hhuxv73eKEBl9+k2upyR7ICzwrWKsRnDlG6TJ1922PyX7hzv4iGnNAAxP758V
 ynICmaBIlrC6ADpgfvTxkHUDpRMoIJOm+dWBi469LC6xac+15S0+PH5ue6BpjA1I
 QMf3foM3sc92QoE8asdlp1+9Zgyx3jY0s7Tu6pJ/+Kst+iEeZv2IdQQBFgoAHRYh
 BHtpamFvcxM3UguKGdjzFQW1gdYXBQJoIkm1AAoJENjzFQW1gdYX46wA/2Mul4NG
 /bvzXx6IC5PNX/tlBwBxGR6JvDn2bESKpgr4AQDH/LQx2RXec9To8kY/Hd/qfvig
 mTnXlsx2pv6LNwQ1Aw==
 =U4KC
 -----END PGP SIGNATURE-----
	-----BEGIN PGP SIGNED MESSAGE-----
	Hash: SHA512

	Date: May 12, 2025
	Chaintip: 000000000000000000020f4edda4f3360a96d80c49e2c8590dadd02f8808a432

	For a number of reasons, I have recently set up a new OpenPGP key,
	and will be transitioning away from my old one.

	The old key will continue to be valid for some time, but I prefer all
	future correspondence to come to the new one. I would also like this
	new key to be re-integrated into the web of trust. This message is
	signed by both keys to certify the transition.

	The old key was:

	pub rsa4096/0x782C165A293D6E18 2022-04-05
	Key fingerprint = 6B45 7D06 0ACE 363C 9D67 D8E6 782C 165A 293D 6E18

	And the new key is:

	pub ed25519/0xD8F31505B581D617 2025-05-06
	Key fingerprint = 7B69 6A61 6F73 1337 520B 8A19 D8F3 1505 B581 D617

	To fetch the full keys, you can simply do:

	curl -fsSL https://github.com/jaonoctus.gpg \| gpg --import

	If you already know my old key, you can verify that the new key is
	signed by the old one:

	gpg --check-sigs 0xD8F31505B581D617

	If you don't already know my old key, or you just want to be double
	extra paranoid, you can check the fingerprint against the one above:

	gpg --fingerprint 0xD8F31505B581D617

	If you are satisfied that you've got the right key, and the UIDs match
	what you expect, I'd appreciate it if you would sign my key:

	gpg --sign-key 0xD8F31505B581D617

	Lastly, if you could upload these signatures, i would appreciate it.
	You can either send me an e-mail with the new signatures: (if you have
	a functional MTA on your system):

	gpg --armor --export 0xD8F31505B581D617 \| mail -s 'OpenPGP Signatures' [email protected]

	Or you can just upload the signatures to a public keyserver directly:

	gpg --keyserver keyserver.ubuntu.com --send-key 0xD8F31505B581D617

	Please let me know if there is any trouble, and sorry for the
	inconvenience.

	Best,
	jaonoctus

	-----BEGIN PGP SIGNATURE-----

	iQIzBAEBCgAdFiEEa0V9BgrONjydZ9jmeCwWWik9bhgFAmgiSbAACgkQeCwWWik9
	bhiJzg/9G65gEpwKung9DYzY/dkTyHl6dplnDxx7PNvr1EkoElC/QdXZO/Kx6mMv
	rGHZYhEDzSL9vM1zkaBjDCBuSp9ameCHBorfCwabjsz4CHmxr/ubdC02B4idpli2
	7ONSGUuzbEHsDbpY20I7mH9WsUsbmO+wyjUUqUuKmWZsjndpZ2ZrqwLbCYnjOoxK
	qM+w8x+ShuiZ+awoNTDCXVJ4vD2JlOGrDRiFuDkysOxQ7SBMJDdXbCNOtDM6rMzF
	Y8JZYR+VawkGh0ra/hzeaoKUECUWVmDS4wiFBxOEdU/CApMfsdcdqlBAs2vQ0Uim
	HA90cFFNNWTqqJgOgo5+5rK19N1drnrNYkdiilsfJIkg/kiEp6AWzFCjP0td4URK
	jAb57TxdU6iQ9tMMTP4Y2WVfMx5TgKn8asIi4sQ+PG9IBtLqnlp48l0y/V+kCUbs
	L3+lZD3dA5MU3lclM1J6273co2oCedCTQH2JS6bnkRvVUf6JuKXCHYe1Gi/2uigg
	Pd9hhuxv73eKEBl9+k2upyR7ICzwrWKsRnDlG6TJ1922PyX7hzv4iGnNAAxP758V
	ynICmaBIlrC6ADpgfvTxkHUDpRMoIJOm+dWBi469LC6xac+15S0+PH5ue6BpjA1I
	QMf3foM3sc92QoE8asdlp1+9Zgyx3jY0s7Tu6pJ/+Kst+iEeZv2IdQQBFgoAHRYh
	BHtpamFvcxM3UguKGdjzFQW1gdYXBQJoIkm1AAoJENjzFQW1gdYX46wA/2Mul4NG
	/bvzXx6IC5PNX/tlBwBxGR6JvDn2bESKpgr4AQDH/LQx2RXec9To8kY/Hd/qfvig
	mTnXlsx2pv6LNwQ1Aw==
	=U4KC
	-----END PGP SIGNATURE-----