On Wed, May 14, 2008 at 12:08 PM, River Tarnell <river(a)wikimedia.org> wrote:
the key _is_ affected if you copy the private part of
the key to an affected
server and use it there.
But only if it was an DSA key. People who copied their RSA key to the
toolserver should be safe (of course you need to ask yourself whether
it is a good idea to put your keys on a shared system but that is
another problem). If you did generate your RSA key on the toolserver
you do have a problem.
Bryan