[tor-talk] Fake keys for Tails developers' email address

[intrigeri]

Hi,

u. (Cc'd) has notified me of two fake keys with Tails developers'
email addresses:

  EB24 9600 79A3 E2B9 3BFE  48B5 05F8 BB78 B38F 4311 
  C3BA A4BF E369 B2B8 6018  B515 0E08 AC78 06C0 69C8 

These are *not* genuine. Don't trust them. Our real keys are
documented on https://tails.boum.org/doc/about/openpgp_keys/.

Interestingly, the 2nd one has been created two days before the fake
key Erinn discovered [1] two months ago, and has the same lifetime (4
years). I guess one might find more such keys by looking at keys
created in the same period.

[1] https://lists.torproject.org/pipermail/tor-talk/2014-March/032308.html

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 800 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20140502/51bd8cd4/attachment.sig>