On 15/11/11 10:11, Ewen McNeill wrote:
On 2011-11-15 10:02 , Ewen McNeill wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 [....] http://public.naos.co.nz/nzrs/NZRS-Custom-Live-CD-v1.6.iso
Sadly, as I suspected might happen, either Thunderbird or the mailing list software changed the the cleartext after the signing (outside Thunderbird), so the signature fails (clearly the long lines needed to be wrapped/canonicalised first). A version of that message which does verify is here:
http://public.naos.co.nz/nzrs/NZRS-Custom-Live-CD-v1.6.signature
Thank for that Ewen, I confirmed the message validates. We should have a PGP key signing party at some point (perhaps during next NZNOG) to set trust of our keys.
(ie, right next to the mirrored file).
Ewen
PS: I figured _someone_ should invoke the use of actual crypto to timestamp the verification... _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535