Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-8622

Stop using 32-bit GPG key IDs

    XMLWordPrintableJSON

Details

    • Icon: Task Task
    • Resolution: Duplicate
    • Icon: Major - P3 Major - P3
    • None
    • None
    • None
    • None
    • 0.25

    Description

      Our Debian and Ubuntu installation instructions currently tell people to download keys based on their 32-bit key id.

      Key servers will serve the latest key matching the requested key id, and it is trivial to create key id collisions.

      I don't know if this would be an issue in practice, but let's just switch to the full GPG key fingerprint if possible.

      Attachments

        Activity

          People

            andrew.aldridge@mongodb.com Andrew Aldridge
            andrew.aldridge@mongodb.com Andrew Aldridge
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              7 years, 26 weeks ago