#219 Spins verification page uses short PGP key IDs
Opened 2 years ago by axels. Modified 2 years ago

The Spins verification page (https://spins.fedoraproject.org/en/verify) uses short PGP IDs instead of the long one. This is considered bad security practice, as there have been some cases of malicious short key ID collisions.

The long key IDs should be used instead (and the "12C944D0 - Fedora 32" key probably be removed).


Login to comment on this ticket.

Metadata