Обсуждение: [pgsql-www] New apt repo key version
Hi, the apt.postgresql.org gpg key has been extended for infinite lifetime some weeks ago. Bumping the key lifetime every few years for some extra years into the future was error-prone in the past, and doesn't really add any security anyway. (If the key were compromised, it wouldn't help that it expires on end-user systems 4 years later...) So, here's the new version to be dropped in in place of https://www.postgresql.org/media/keys/ACCC4CF8.asc This is the very same file that is already being shipped as part of pgdg-keyring.deb. Cheers, Christoph -- Senior Berater, Tel.: +49 2166 9901 187 credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, Jörg Folz, Sascha Heuer pgp fingerprint: 5C48 FE61 57F4 9179 5970 87C6 4C5A 6BAB 12D2 A7AE
Вложения
On Wed, Feb 15, 2017 at 1:12 PM, Christoph Berg <christoph.berg@credativ.de> wrote:
Hi,
the apt.postgresql.org gpg key has been extended for infinite lifetime
some weeks ago. Bumping the key lifetime every few years for some
extra years into the future was error-prone in the past, and doesn't
really add any security anyway. (If the key were compromised, it
wouldn't help that it expires on end-user systems 4 years later...)
So, here's the new version to be dropped in in place of
https://www.postgresql.org/media/keys/ACCC4CF8.asc
This is the very same file that is already being shipped as part of
pgdg-keyring.deb.
Updated.