-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA256

I am transitioning GPG keys from an old 1024-bit DSA key to a new
4096-bit RSA key.  The old key will continue to be valid for some time,
but I prefer all new correspondance to be encrypted in the new key, and
will be making all signatures going forward with the new key.

This transition document is signed with both keys to validate the
transition.

If you have signed my old key, I would appreciate signatures on my new
key as well, provided that your signing policy permits that without
reauthenticating me.

The old key, which I am transitional away from, is:

  pub   1024D/DC426429 2002-01-03 Frank S. Thomas <fst@debian.org>
      Key fingerprint = 976E 747F 499C 4580 15CB  C0BF 7EDE 8735 DC42 6429

The new key, to which I am transitioning, is:

  pub   4096R/1874C2DA 2012-04-10 Frank S. Thomas <frank@timepit.eu>
      Key fingerprint = E8E0 DFA5 ED5B 5323 0316  7A9F CCCF CFC3 1874 C2DA

To fetch the full new key from a public key server using GnuPG, run:

  gpg --keyserver keys.gnupg.net --recv-key CCCFCFC31874C2DA

If you have already validated my old key, you can then validate that the
new key is signed by my old key:

  gpg --check-sigs CCCFCFC31874C2DA

If you then want to sign my new key, a simple and safe way to do that is
by using caff (shipped in Debian as part of the "signing-party" package)
as follows:

  caff CCCFCFC31874C2DA


Please contact me via e-mail at <frank@timepit.eu> if you have any
questions about this document or this transition.


                                                        Frank S. Thomas
                                                        frank@timepit.eu
                                                        11.04.2012
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAk+Es78ACgkQft6HNdxCZCmI3ACfdKdf7ENAwLtEvExc7S9Ttd7d
mfwAn17+nZCQPjLqD+4txey0VuToRM9liQIcBAEBCAAGBQJPhLO/AAoJEMzPz8MY
dMLahmMQAKyoXVrvoyF1dmo/iKbU9JN1+xVwF+Xu+WH/4AMBo8+3Ur+fxXEz5B7O
G1el4ocYiWIbdfnUBSvU79XuGxRV6ltyySHd5uG5TUe5fmP3CdwwfE8P64dXsqr0
C5xkMMJeDoy8rELnn1FCNPLUgkR0V1GQi+kuB0J/tPT/zsCFPAXO6yyEkurzRtsy
+CZvGxMv4uveFmpGasXEbz286U2WCcLEVLkf/xJbffwuhVAivWLqINxAPj2/xT01
jtKIjca2wPHN0u8gsW1ygqJx7G5rl1tjBoz3qHyH0N9V6bwNArlPMgOJESdUU45J
UGImgfZy2BddYIs26+u8u1mBfTcbKG8mBOvbHdB9aJcLL7nyjZEXtlmpl/C6jfyk
qCi7x9ZaTybceuLdn1kFHMy3Cz9AvrjAnLkf1OHYdhBUZuVAKrM7QmDzqyIFxDU7
9AiPcqF/Wp6Iof8SEaFuO85FtCfiuhBNcUoBkWRXgn3dA8XTb1nLHXcLU4VBrEKi
+l4+ujaQAo08OM1tkj+TNrl6EilLalTLNRNYeMS3OiC/IilbTZpteFk4RYrQKKT8
rNHxcLXDthzw6gAZ3T88jbw8G+1G/L+wgmMyZ5iqvicCNbMalka/GWInM6+2RoyB
z2ji0zppVT81BStgrdF3yzBMqEG+KQWCm75v0QB5OhRBJcA+FWiF
=Q9G5
-----END PGP SIGNATURE-----