gpg release key changed?

General
1

Has the gpg release key changed since 2021? https://syncthing.net/release-key.gpg

The key on my old installation is different from the one that is available online.

But my installation still works, so the key from 2021 must also be valid?

old:

gpg --show-keys /usr/share/keyrings/syncthing-archive-keyring.gpg
pub   rsa2048 2014-12-29 [SC]
      37C84554E7E0A261E4F76E1ED26E6ED000654A3E
uid                      Syncthing Release Management <release@syncthing.net>
sub   rsa2048 2014-12-29 [E]

new:

gpg --show-keys /usr/share/keyrings/syncthing-archive-keyring.gpg
pub   rsa4096 2024-11-24 [SC]
      FBA2E162F2F44657B38F0309E5665F9BD5970C47
uid                      Syncthing Release Management <release@syncthing.net>
sub   rsa4096 2024-11-24 [E]

Looks like a normal exchange, but the old key is still valid? Presumably I should update the key on all systems?

2
1 Like