From 7294fd9a8c02ee678bce23e760f7a913366f074b Mon Sep 17 00:00:00 2001 From: Dustin Jacobsen Date: Sun, 22 Mar 2020 15:21:15 -0600 Subject: [PATCH] Not truncating cryptographic fingerprint Eight hexits was not nearly enough to make generating a hash collision cost-prohibitive. And although Docker is serving everything over TLS, this was teaching bad security hygiene. --- install/linux/docker-ce/ubuntu.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install/linux/docker-ce/ubuntu.md b/install/linux/docker-ce/ubuntu.md index d55a0798a8d7..2d5f3a3a3d97 100644 --- a/install/linux/docker-ce/ubuntu.md +++ b/install/linux/docker-ce/ubuntu.md @@ -116,10 +116,10 @@ from the repository. Verify that you now have the key with the fingerprint `9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88`, by searching for the - last 8 characters of the fingerprint. + key by it's fingerprint. ```bash - $ sudo apt-key fingerprint 0EBFCD88 + $ sudo apt-key fingerprint "9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88" pub rsa4096 2017-02-22 [SCEA] 9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88