On 10/31/18 7:55 AM, Eli Schwartz wrote:

On 10/31/18 5:52 AM, pellertson@firemail.cc wrote:

...

I need help reseting my email address on my AUR account.  Recently lost my old email address password so I've been migrating everything.  I have the ssh keys for my account if proof is needed.

- Parker

Hi, so we can in fact do this since ssh keys can be used to cryptographically sign files.

Please respond via private email with the following information:

A plaintext file containing your AUR username, and your desired reset password. A signature file generated via the following command:

openssl pkeyutl -sign -inkey ~/.ssh/my_aur_ssh_private_key -in the_plaintext_file > the_plaintext_file.sig

Then I will verify this signature via the public key in your AUR profile, and change your password for you.

After receiving and verifying this, I've reset your account email -- I suppose (even publicly) sending just the account information is sufficient proof to simply change the email, after all. Side note: your account had an associated PGP key, which you could have used to sign a request as well. -- Eli Schwartz Bug Wrangler and Trusted User