metasploit-gs/Committer-Keys.md

This page lists the keys in use by Metasploit committers.

Account	E-mail	Gist	MIT
@bcook-r7	bcook@rapid7.com	D5E4D8D5	0x663AF51BD5E4D8D5
@FireFart	firefart@gmail.com	66BC32C7	0xBCFF4FA966BC32C7
@jlee-r7	egypt@metasploit.com	CEA0A321	0x2d6094c7cea0a321
@jhart-r7	jon_hart@rapid7.com	AFA8E9D3	0x2FA9F0A3AFA8E9D3
@jvazquez-r7	juan.vazquez@metasploit.com	B9352D83	0x38D99152B9352D83
@jvennix-r7	joev@metasploit.com	3E85A2B0	0x127b05fb3e85a2b0
@kernelsmith	kernelsmith@metasploit.com	92EC0809	0xf2c611dc92ec0809
@limhoff-r7	luke_imhoff@rapid7.com	B33356F8	0x5B1FB01FB33356F8
@Meatballs1	eat_meatballs@hotmail.co.uk	1F2F8B38	0x5380EAF01F2F8B38
@OJ	oj@buffered.io	1FAA5749	0x49EEE7511FAA5749
@scriptjunkie1	scriptjunkie@scriptjunkie.us	591C6B5D	0xE0F49052591C6B5D
@timwr	timrlw@gmail.com	ABBAABEF	0x217FBA50ABBAABEF
@todb-r7	tod_beardsley@rapid7.com	EA19CAAC	0xBD63D0A3EA19CAAC
@wchen-r7	wei_chen@rapid7.com	F06F730B	0x2384DB4EF06F730B
@wvu-r7	william_vu@rapid7.com	C1629024	0xE761DCB4C1629024
@zeroSteiner	zeroSteiner@gmail.com	A5E15412	0xC00D6B6AA5E15412

Signing criteria

In order to get @todb-r7 to sign your key, you should:

• tell him your Key ID over some mechanism (IRC, Skype, etc)
• post it to https://gist.github.com under your GitHub account

If you are near by, he'll ask you to confirm your Key ID in meatspace, using unique biometric and contextual data to verify your identity. If not, he'll e-mail you, using that key and a known e-mail address, and expect your response.

This constitutes verification that your key is, in fact, yours. Please set a reasonable expiration date (18 months is recommended), key length (2048 or better), and use good sense when managing your private key availability.

Signing HOWTO

Signing merges and commits is easy and fun. Generate a signing key, if you don't have one already, using your favorite PGP/GPG interface (I use gpg --gen-key). Then add this to your $HOME/.gitconfig:

[user]
  name = Your Name
  email = your_email@example.com
  signingkey = DEADBEEF # Must match name and email exactly!
[alias]
  c = commit -S --edit
  m = merge -S --no-ff --edit

Using git c and git m from now on will sign every commit with your DEADBEEF key.