Security farce: Dead Developer still on Debian keyring after 11 years

jwilk 5y ago ↗

> We went looking for details.

They didn't go very far though.

Steve's key was removed in 2015, because his key was 1024-bit:

Apparently Debian folks learned about Steve's death only in 2016:

The part of the project history page about Steve was added in 2020:

Security farce: Dead Developer still on Debian keyring after 11 years (debian.community)