1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the PACKAGE package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
8 "Project-Id-Version: PACKAGE VERSION\n"
9 "Report-Msgid-Bugs-To: tails-l10n@boum.org\n"
10 "POT-Creation-Date: 2020-04-12 16:10+0200\n"
11 "PO-Revision-Date: 2020-12-25 17:45+0000\n"
12 "Last-Translator: emmapeel <emma.peel@riseup.net>\n"
13 "Language-Team: LANGUAGE <LL@li.org>\n"
16 "Content-Type: text/plain; charset=UTF-8\n"
17 "Content-Transfer-Encoding: 8bit\n"
18 "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<="
19 "4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
20 "X-Generator: Weblate 3.11.3\n"
24 msgid "[[!meta date=\"Mon, 16 Mar 2015 12:34:56 +0000\"]]\n"
29 msgid "[[!pagetemplate template=\"news.tmpl\"]]\n"
30 msgstr "[[!pagetemplate template=\"news.tmpl\"]]\n"
34 msgid "[[!meta title=\"Transition to a new OpenPGP signing key\"]]\n"
39 msgid "[[!tag announce]]\n"
43 msgid "Tails is transitioning to a new OpenPGP signing key."
47 msgid "The signing key is the key that we use to:"
50 #. type: Bullet: ' - '
51 msgid "Sign our official ISO images."
54 #. type: Bullet: ' - '
56 "Certify the other [[OpenPGP keys|doc/about/openpgp_keys]] used by the "
62 msgid "<div class=\"note\">\n"
63 msgstr "<div class=\"note\">\n"
68 "<p>The previous signing key is safe and, to the best of our knowledge, it\n"
69 "has not been compromised.</p>\n"
75 "<p>We are doing this change to improve our security practices when\n"
76 "manipulating such a critical piece of data.</p>\n"
86 msgid "<div class=\"tip\">\n"
87 msgstr "<div class=\"tip\">\n"
93 " <li>The old key can still be used to verify Tails 1.3 ISO images.</li>\n"
94 " <li>The new key will be used to sign ISO images starting from Tails 1.3.1.</li>\n"
100 msgid "Import and verify the new signing key"
105 "Click on the following button to download and import the new signing key:"
110 msgid "<a class=\"download-key\" href=\"https://tails.boum.org/tails-signing.key\">new Tails signing key</a>\n"
115 "The new signing key is itself signed by the old signing key. So you can "
116 "transitively trust this new key if you had trusted the old signing key."
121 "To verify that the new key is correctly signed by the old key, you can "
122 "execute the following command:"
127 msgid " gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F\n"
132 "The output should include a signature of the new key by the old key such as:"
137 msgid " sig! 0x1202821CBE2CD9C1 2015-01-19 Tails developers (signing key) <tails@boum.org>\n"
142 "In this output, the status of the verification is indicated by a flag "
143 "directly following the \"`sig`\" tag. A \"`!`\" indicates that the signature "
144 "has been successfully verified."
149 msgid "Security policy for the new signing key"
153 msgid "Here is the full description of the new signing key:"
160 " pub 4096R/0xDBB802B258ACD84F 2015-01-18 [expires: 2017-01-11]\n"
161 " Key fingerprint = A490 D0F4 D311 A415 3E2B B7CA DBB8 02B2 58AC D84F\n"
162 " uid [ unknown] Tails developers (offline long-term identity key) <tails@boum.org>\n"
163 " uid [ unknown] Tails developers <tails@boum.org>\n"
164 " sub 4096R/0x98FEC6BC752A3DB6 2015-01-18 [expires: 2017-01-11]\n"
165 " sub 4096R/0x3C83DCB52F699C56 2015-01-18 [expires: 2017-01-11]\n"
170 msgid "You can see that it has:"
173 #. type: Bullet: ' - '
175 "A primary key (marked as `pub`) with ID `0xDBB802B258ACD84F`. This primary "
179 #. type: Bullet: ' - '
181 "Is not owned in a usable format by any single individual. It is split "
182 "cryptographically using [gfshare](http://www.digital-scurf.org/software/"
186 #. type: Bullet: ' - '
187 msgid "Is only used offline, in an air-gapped Tails."
190 #. type: Bullet: ' - '
192 "Expires in less than one year. We will extend its validity as many times as "
193 "we find reasonable."
196 #. type: Bullet: ' - '
198 "Two subkeys (marked as `sub`) with IDs `0x98FEC6BC752A3DB6` and "
199 "`0x3C83DCB52F699C56` which are stored on OpenPGP smartcards and owned by our "
200 "release managers. Smartcards ensure that the cryptographic operations are "
201 "done on the smartcard itself and that the secret cryptographic material is "
202 "not directly available to the operating system using it."
207 msgid "Web-of-Trust with the Debian keyring"
212 "This new signing key has already been signed by various Debian developers, "
216 #. type: Bullet: ' - '
217 msgid "gregor herrmann <gregoa@debian.org>, with key `0xBB3A68018649AA06`"
220 #. type: Bullet: ' - '
221 msgid "Holger Levsen <holger@debian.org>, with key `0x091AB856069AAA1C`"
224 #. type: Bullet: ' - '
225 msgid "Stefano Zacchiroli <zack@debian.org>, with key `0x9C31503C6D866396`"
230 "So you can use the technique described in our documentation to further "
231 "[[verify the Tails signing key against the Debian keyring|install/expert/"
232 "usb#verify-key]] using any of those three keys."