fedora-websites

#501 short pgp key IDs are unsafe and should be replaced
Closed: Invalid Opened by genodeftest.

Closed: Invalid
Reopen Issue

It is not recommended to use short key IDs any more since they can be spoofed. https://getfedora.org/verify should provide at least one (better all) of these:
1. long key ID
2. complete fingerprint
3. the pgp key itself

For now I've included the long keys. If fingerprints and keys are necessary we could use a table or something like this https://getfedora.org/en/keys/

As for ticket 296 (see [https://fedorahosted.org/fedora-websites/ticket/296#comment:2 comment]) I'm closing this as wontfix.
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.