drop old dsa1024 key from https://trisquel.info/en/download
Hi. Congrats on aramo release!
On the download page for aramo, the GPG key link is this one:
https://archive.trisquel.info/trisquel/trisquel-archive-signkey.gpg
That link still includes the old insecure dsa1024 key. Thus, anyone who downloads that key and verify the aramo release images against the official GPG key provided by the project may still end up with something uninteneded -- someone can replace the ISO and sign it with a cracked dsa1024 key, and users would have a hard time knowing how to handle that.
So, please drop the E6C27099CA21965B734AEA31B4EFB9F38D8AEBF1 from the official project GPG key, either by replacing the URL to the official key with something else and updating https://trisquel.info/en/download or (preferably) remove the key from the https://archive.trisquel.info/trisquel/trisquel-archive-signkey.gpg file.
This is related to #53 (closed) but slightly different, so I'm opening a separate issue about it.