Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-8622

Stop using 32-bit GPG key IDs

XMLWordPrintableJSON

    • Type: Icon: Task Task
    • Resolution: Duplicate
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • 0.25

      Our Debian and Ubuntu installation instructions currently tell people to download keys based on their 32-bit key id.

      Key servers will serve the latest key matching the requested key id, and it is trivial to create key id collisions.

      I don't know if this would be an issue in practice, but let's just switch to the full GPG key fingerprint if possible.

            Assignee:
            andrew.aldridge@mongodb.com Andrew Aldridge
            Reporter:
            andrew.aldridge@mongodb.com Andrew Aldridge
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              7 years, 40 weeks, 4 days ago