Browse Source

Merge JoinMarket-Org/joinmarket-clientserver#1772: Mark my previous signing key as lost

b03c5effae Mark my previous signing key as lost (Adam Gibson)

Pull request description:

  This is a very overdue notification - I lost access to the signing key that existed in this file in a hard drive failure on my laptop. It was some time in August last year.

  So obviously this needs some consideration from a security POV.

  As I saw it happen in "real time" (and, you're going to laugh, but it literally was a case of coffee spilled on a laptop), I'm not in any doubt about the fact that it is lost (I tried to retrieve it in the succeeding hours, but failed), nor do I have any realistic worry that it was somehow compromised and accessed by anyone else - the chance of such a thing is never 0, but the point is it is not higher than previous to the accident. Of course, access to my code signing key would only allow code signing, the key has no other security significance. So obviously if you do see code signed or anything else signed with that key after August 2024 do not trust it and also alert me! (But, it's not going to happen).

  I have a new key, but, to state clearly what is probably by now obvious, I don't have any intention, currently, of continuing contributions to the Joinmarket project. So the new code signing key isn't added here.

  Equally, if people need my support in changing the status of the project, for example, adding new contributors commit rights, don't hesitate to ask.

ACKs for top commit:
  kristapsk:
    ACK b03c5effae

Tree-SHA512: 9113bcec70a73963f2a98da4daeabad90dece12f3a4618bd6f05de1b0ab5ccd6e890b06c2715327a3908c95ca0ded9d899aefe8e6b30e86d2eb4389ff7739e63
master
merge-script 8 months ago
parent
commit
df23ba0240
No known key found for this signature in database
GPG Key ID: 33E472FE870C7E5D
  1. 0
      pubkeys/AdamGibson-LOST-Aug-2024.asc

0
pubkeys/AdamGibson.asc → pubkeys/AdamGibson-LOST-Aug-2024.asc

Loading…
Cancel
Save