From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: postgresql_2021@michaelaltfield.net
Subject: BUG #17027: Deprecate 1024-bit DSA PGP Keys (Disallowed by NIST since 2011)
Date: Wed, 19 May 2021 15:46:48 +0000
Message-ID: <17027-90bf39c6143e8f0d@postgresql.org> (raw)
The following bug has been logged on the website:
Bug reference: 17027
Logged by: Michael Altfield
Email address: postgresql_2021@michaelaltfield.net
PostgreSQL version: Unsupported/Unknown
Operating system: All
Description:
Hello,
Can you please list all of the official PostgreSQL PGP keys on a single page
somewhere on postgresql.org?
I am having issues figuring out exactly what are the valid keys/fingerprints
of the official PostgreSQL PGP keys used for both [a] signing official
releases and [b] contacting PostgreSQL.
It would be best if there were a single canonical URL where one can view a
list of all of the official PostgreSQL PGP keys. Personally, I think it
would make sense to list them all here:
https://www.postgresql.org/support/security/
Please collect all of the official PostgreSQL PGP keys that are used for
signing releases and email contact and publish their full fingerprints on
some page, ideally the security-page linked-to above.
Thank you,
Michael Altfield
https://www.michaelaltfield.net
PGP Fingerprint: 0465 E42F 7120 6785 E972 644C FE1B 8449 4E64 0D41
Note: If you cannot reach me via email, please check to see if I have
changed my email address by visiting my website at
https://email.michaelaltfield.net
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: noreply@postgresql.org, pgsql-bugs@lists.postgresql.org, postgresql_2021@michaelaltfield.net
Subject: Re: BUG #17027: Deprecate 1024-bit DSA PGP Keys (Disallowed by NIST since 2011)
In-Reply-To: <17027-90bf39c6143e8f0d@postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox