New ftpmaster key for 2006 (page 574)More...
Reported on: 2006-01-04
In chapter C. Miscellaneous on page 574:
On 3 January 2006, a new archive signing key for the main Debian archive was put in place. The following are the relevant data to help you verify it.
Fingerprint: 0847 50fc 01a6 d388 a643 d869 0109 0831 2d23 0c5f
Creator: Anthony Towns (key 0x2a4e3eaa)
As in the book, this information comes without any warranty.
Quoting a member of the release team (original post):
The Release.gpg file contains two signatures now, both one with the 2005 key and the 2006 key, to have a short transition period. The archive still validates with the 2005 key, which isn't expired yet, and I think APT should not spread too worrysome errors at users while the archive can still be verified. Only when the 2005 expires and the user still hasn't imported the 2006 key (some mechanism needs to be implemented for that for it to happen cleanly and in a user-frienly way) apt should really bail out on the user.