[tor-bugs] #9443 [BridgeDB]: Generate and secure pgp keys for bridges.tpo

[Tor Bug Tracker & Wiki]

#9443: Generate and secure pgp keys for bridges.tpo
--------------------------+----------------------------
     Reporter:  sysrqb    |      Owner:  isis
         Type:  task      |     Status:  closed
     Priority:  major     |  Milestone:
    Component:  BridgeDB  |    Version:
   Resolution:  fixed     |   Keywords:  bridgedb-email
Actual Points:            |  Parent ID:  #5463
       Points:            |
--------------------------+----------------------------
Changes (by isis):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 I'm going with Version 2. Here are the keyrings which I'm putting on
 ponticum, they are not capable of certifying further keys without using
 the secret portion of the 16384-bit offline key:

 {{{
 /home/bridgedb/.gnupg/pubring.gpg
 -----------------------------------------------------------------
 pub   16384R/CBD97AA24E8E472E 2013-10-12
 uid               [ultimate] BridgeDB (Offline ID Key)
 <bridges at bridges.torproject.org>

 pub   4096R/8DC43A2848821E32 2013-09-11 [expires: 2014-09-11]
 uid               [  full  ] BridgeDB <bridges at bridges.torproject.org>
 sub   4096R/21B554E95938F4D0 2013-09-11 [expires: 2014-09-11]
 sub   4096R/E7793047C5B54232 2013-09-11 [expires: 2014-09-11]

 /home/bridgedb/.gnupg/secring.gpg
 -----------------------------------------------------------------
 sec#  4096R/8DC43A2848821E32 2013-09-11 [expires: 2014-09-11]
 uid                          BridgeDB <bridges at bridges.torproject.org>
 ssb   4096R/21B554E95938F4D0 2013-09-11
 ssb   4096R/E7793047C5B54232 2013-09-11
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9443#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online