Author: Leah Rowe <firstname.lastname@example.org>
Date: Wed, 14 Mar 2018 01:14:45 +0000
Update download page to include the 16-digit GPG key (no pull request needed)
This was brought to our attention by attila_lendvai on #libreboot IRC.
Essentially, the previous instruction was vulnerable to potential collision
With this new instruction, it should be a bit safer.
Since this is urgent, no pull request was issued. This has been committed to
the repository directly, with consent from and_who on IRC.
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/www/download.md b/www/download.md
@@ -17,7 +17,9 @@ GPG signing key
Releases are signed with GPG.
- $ gpg --recv-keys 0x05E8C5B2
+ gpg --recv-keys 0x969A979505E8C5B2
+Full key fingerprint: CDC9 CAE3 2CB4 B7FC 84FD C804 969A 9795 05E8 C5B2
The GPG key can also be downloaded with this exported dump of the