The key in the message was used in my last announcement, so that establishes continuity there. But regardless, all mails I send are signed automatically by Gmail using either the gmail.com consumer key (for my posts to this list) or the google.com corporate key (for my posts to the bitcoinj lists), see dkim.orgfor more details on this. Whilst this is not signing in the GPG web of trust sense, realistically the Gmail DKIM keys are much safer than any key I could create/maintain, and my ability to sign mail as hearn@google.com is controlled by hardware second factors and various other rather intense security systems I can't discuss. I've considered just not having the additional Bitcoin-key based signatures at all, but it would help keep continuity in the case that I leave Google or if there's a DKIM key rotation. On Wed, Apr 10, 2013 at 10:58 AM, Andy Parkins wrote: > On Tuesday 09 April 2013 22:03:35 Mike Hearn wrote: > > > To get bitcoinj 0.8, check out our source from git and then run *git > fetch > > --all; git checkout **cbbb1a2bf4d1*. This will place you on the 0.8 > release > > in a secure manner. This message was written on Tuesday 9th April 2013 > and > > Not quite secure yet, because you didn't sign your email. > > > Andy > > -- > Dr Andy Parkins > andyparkins@gmail.com >