From b65bb17fd9db1e27c91a952e294722260f336483 Mon Sep 17 00:00:00 2001 From: Philipp Hagemeister Date: Mon, 22 Aug 2016 01:26:39 +0200 Subject: [PATCH] highlight actual fingerprints It has always been possible to generate keys with the same key ID (it's only 32 Bit, duh). There has now been a public demonstration of just that. Do what we should have done ages ago by listing the full fingerprint only. --- download.html.in | 8 ++++---- style.css | 5 +++++ 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/download.html.in b/download.html.in index b363db3e9..d624ad29d 100644 --- a/download.html.in +++ b/download.html.in @@ -54,16 +54,16 @@ See the pypi page for more

The following GPG keys will be used to sign the binaries and the git tags:

Older releases are also signed with one of: