[tor-talk] [tor-announce] Tor 0.3.5.7 is released

[Jim]

Nick Mathewson wrote:
> You can download the source code from the usual place on the website.
> Packages should be available within the next several weeks, with a new
> Tor Browser some time in the next month or so.

Nick, it would appear your signing key (or sub-key) has expired:

$ verify_detached tor/tor-0.3.5.7.tar.gz.asc
gpg: Signature made Mon Jan  7 14:37:18 2019 MST using RSA key ID 9E92B601
gpg: Good signature from "Nick Mathewson <nickm at alum.mit.edu>"
gpg:                 aka "Nick Mathewson <nickm at wangafu.net>"
gpg:                 aka "Nick Mathewson <nickm at freehaven.net>"
gpg:                 aka "Nick Mathewson <nickm at torproject.org>"
gpg: Note: This key has expired!
Primary key fingerprint: 2133 BC60 0AB1 33E1 D826  D173 FE43 009C 4607 B1FB
      Subkey fingerprint: 7A02 B352 1DC7 5C54 2BA0  1545 6AFE E6D4 9E92 B601

$ gpg -v --list-keys 9E92B601
gpg: using PGP trust model
gpg: NOTE: signature key 9E92B601 expired Sun Sep 23 08:08:11 2018 MDT
pub   4096R/4607B1FB 2016-09-21 [expires: 2019-09-21]
uid                  Nick Mathewson <nickm at alum.mit.edu>
uid                  Nick Mathewson <nickm at wangafu.net>
uid                  Nick Mathewson <nickm at freehaven.net>
uid                  Nick Mathewson <nickm at torproject.org>
sub   4096R/9E92B601 2016-09-23 [expired: 2018-09-23]
sub   4096R/86AC8BFF 2016-09-23 [expired: 2018-09-23]

$ type verify_detached
verify_detached is a function
verify_detached ()
{
     gpg --verify $1 ${1%.*}
}