From owner-freebsd-stable@FreeBSD.ORG Mon Sep 29 02:47:17 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 120716CC; Mon, 29 Sep 2014 02:47:17 +0000 (UTC) Received: from ruggedinbox.com (ruggedinbox.com [94.156.77.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C32FBA93; Mon, 29 Sep 2014 02:47:16 +0000 (UTC) Message-ID: In-Reply-To: <20140928155118.GA75063@hub.FreeBSD.org> References: <20140928155118.GA75063@hub.FreeBSD.org> Date: Mon, 29 Sep 2014 04:45:21 +0200 Subject: Re: FreeBSD 10.1-BETA3 Now Available From: beeessdee@ruggedinbox.com To: "Glen Barber" Mime-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: FreeBSD Release Engineering Team , freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Sep 2014 02:47:17 -0000 On Sun, 28 Sep 2014 11:51:18 -0400, "Glen Barber" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 Why 10.1-BETA3 announcement signed with not usual PGP key? gpgv: Signature made Sun Sep 28 11:51:18 2014 EDT using RSA key ID 478FE293 gpgv: Can't check signature: No public key Compare 10.1-BETA2 announce: gpgv: Signature made Sun Sep 21 13:06:56 2014 EDT using RSA key ID AF8B5ED0 gpgv: using subkey AF8B5ED0 instead of primary key A0B946A3 gpgv: Good signature from "Glen Barber " gpgv: aka "Glen Barber " gpgv: aka "Glen Barber " gpgv: textmode signature, digest algorithm SHA256 This key new last year/expire 2018, so very unexpected. Shocking it is: some people actually check this, not like http://xkcd.com/1181/ , you know. ;-) Seriously, SHA256 checksum on ftp mirror not so useful. PGP signed mail with checksum, who could guess, we actually use this and its not wasted efforts! Thanks.