Ditching GPG in favor of OpenSSH

Published: 2024-12-05

Starting December 9th, Floofi Systems is ditching GPG as a signing mechanism for critical services, such as our warrant canary. New Git commits are already being signed with SSH.

Please use the following SSH key from now on:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIVFhPFF3NQQE3aZTl0GymR7SL+63JuGc8yFaPJqgx1+ me@floo.fi

Please keep the old GPG key for reference purposes. We might decide to switch back to it if necessary.

You will find below a message signed with both the old GPG key which you can still find at https://floo.fi/publickey.txt, as well as the new SSH key. Note that this SSH key is to be used only for signing and a different key is being used for authentication.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The GPG key AEA7 73DB 0620 C57C FFB0  7A91 EFBD C684 35A5 74B7 is
now for legacy purposes only and should not be used any longer.
The following SSH key should be used instead:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIVFhPFF3NQQE3aZTl0GymR7SL+63JuGc8yFaPJqgx1+ me@floo.fi

- - Starscouts
-----BEGIN PGP SIGNATURE-----
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=DLjn
-----END PGP SIGNATURE-----
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAghUWE8UXc1BATdplOXQbKZHtIv7
rcm4ZzzIVo8mqDHX4AAAAJdGVzdDIudHh0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1l
ZDI1NTE5AAAAQMG10Pi07F2oFQy+hv19hplsydBfEN4/HkAgZ8Jn7okw9NVO+v5bpexQW7
WfJG/jDW6Sil/fIfdMnDGCoqeZvw0=
-----END SSH SIGNATURE-----

Last updated