-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA256

Tue, 03 Nov 2009 13:49:53 +0100

I've recently set up a new RSA-based GPG key, and will be transitioning
away from my old DSA-based one.  The old key will be revoked soon, so I
prefer all future correspondence to use the new one.  I would also like
to ensure that this new key is well-integrated into the web of trust.
This message is signed by both keys to certify the transition.

The old DSA key was:
pub   1024D/29499F61 1999-04-22
      Key fingerprint = 1155 4B19 A50F 1136 6E60  A499 7CF3 F5AF 2949 9F61

The new RSA key is:
pub   4096R/FFFFFFFE 2009-10-23
      Key fingerprint = 5C80 9377 432D 6157 DDF5  2D5D 055C 4B35 FFFF FFFE

If you already know my old key, you can verify that the new key is
signed by the old one:
	gpg --check-sigs FFFFFFFE

If you don't already know my old key, or if you're extra-paranoid, you
can check the fingerprint against the one given above:
	gpg --fingerprint FFFFFFFE

If you have previously signed my old DSA key, and if you're satisfied
that you've got the correct new RSA key, then I'd appreciate it if you
would sign my new key as well:
	caff FFFFFFFE

The caff program is in the signing-party package in Debian.  Please be
careful to generate signatures that don't rely on the weakening SHA-1
hash algorithm, which requires some careful configuration even if you've
already configured gpg correctly.  See
http://www.gag.com/bdale/blog/posts/Strong_Keys.html for the gory
details.

Thanks,
Sam Hocevar
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=hZrW
-----END PGP SIGNATURE-----