Recent FSF Compromise and rsync ... pgp keys?

[King, Daniel]

Hi, folks.
 
I've been quite concerned about Open Source and the recent FSF compromise.
I realize that FSF does not seem to have rsync, but prudence would dictate
that I check other sources as well.
 
Could someone please e-mail the public key for rsync to the list or to me
directly?
 
rsync-2.5.6.tar.gz      rsync-2.5.6.tar.gz.sig
 
I seem to be having a spot of trouble getting to any public key servers from
my current location, and the files provided (as above) on the Samba ftp site
don't seem to be adequate by themselves:
 
$ gpg --verify ./rsync-2.5.6.tar.gz.sig ./rsync-2.5.6.tar.gz
gpg: Signature made Tue Jan 28 00:41:02 2003 EST using DSA key ID 189C0E94
gpg: Can't check signature: public key not found
 
Thanks,
A. Daniel King, System Analyst
HP-UX, Linux, Solaris