• New control message signing key for Big Eight hierarchies

    From Russ Allbery@21:1/5 to All on Sun Jun 27 15:39:18 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    The control message signing key for the Big Eight hierarchies has changed.
    The new key is 8E181BEF0BE638962C1A5C98FAFE7B550C18C8B7, available from <https://www.eyrie.org/~eagle/big-8/> and signed with my personal key.
    The control message sender and key ID are unchanged.

    If you are a news server administrator who accepts signed control messages
    for the Big Eight hierarchy, please replace the key in your local keyring
    with that new key. The corresponding control.ctl entry is:

    ## COMP, HUMANITIES, MISC, NEWS, REC, SCI, SOC, TALK (The Big Eight)
    # Contact: board@big-8.org
    # URL: https://www.big-8.org/
    # Admin group: news.announce.newgroups
    # Key fingerprint: 8E18 1BEF 0BE6 3896 2C1A 5C98 FAFE 7B55 0C18 C8B7
    # *PGP* See comment at top of file. newgroup:*:comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:drop rmgroup:*:comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:drop checkgroups:group-admin@isc.org:comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:verify-news.announce.newgroups
    newgroup:group-admin@isc.org:comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:verify-news.announce.newgroups
    rmgroup:group-admin@isc.org:comp.*|humanities.*|misc.*|news.*|rec.*|sci.*|soc.*|talk.*:verify-news.announce.newgroups

    The control messages for the Big Eight hierarchies (comp.*, humanities.*, misc.*, news.*, rec.*, sci.*, soc.*, and talk.*) was one of the first
    control message signing keys generated and is entirely obsolete and concerningly weak by modern OpenPGP standards. The new key uses
    (relatively) current OpenPGP best practices.

    Duplicate control messages will continue to be issued using the old key
    for the indefinite future. However, be aware that the old key should not
    be considered secure and could probably be brute-forced if someone cared enough.

    - --
    Russ Allbery (eagle@eyrie.org) <https://www.eyrie.org/~eagle/> -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE1zk0tJZ0z1zNmsJ4fYAxXFc23nUFAmDY/WgACgkQfYAxXFc2 3nV18Af/UnPGYN3B4S0xsQKKCpwN9b45JIaXmPZZ5cj1CCWFQrTGVqRk1NYjlU68 81hFSUP4KKgt8Gura4YV4pBfq+S6eqZhJqk+fgtLN1STt2AO07LulUBuEp9/McEY lgBlTiNbuAmKrTHu5GYdz0gS/rI56i+1M2tzGC7zS0E4oOnvTOWkiUdCRljaxPCC MsawPJsnrZO5zFQWklFWZJGPiDOpwjEnSkuz60q42/3gbEsxl80LYbORGULfrgdg 1rhEpiF9NP0fzWxkR4teB3RY7lh5uh7nNE5Qr3tLD9dRnZbn6cFFH83P2NO0lg50 DOrF0CaloOQ7ffDHsPIWgs5Qw+kmag==
    =d6pL
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)