zsh-workers
 help / color / mirror / code / Atom feed
* Hosting copies of the PGP public keys
@ 2020-07-13 18:14 Daniel Shahaf
  2020-07-14  8:17 ` Peter Stephenson
  2020-07-14 17:53 ` dana
  0 siblings, 2 replies; 5+ messages in thread
From: Daniel Shahaf @ 2020-07-13 18:14 UTC (permalink / raw)
  To: zsh-workers

Phil points out that it would be useful for
http://zsh.sourceforge.net/Arc/source.html to carry not only the `gpg
--list-keys` output but also actual copies of the public keys, in
a format that can be imported by OpenPGP tools (e.g., «gpg --import»),
in order to let people retrieve keys without relying on the public
keyservers.

I propose that that the RMs add copies of their public keys to, say,
keys/{pws,danielsh,dana}.asc in the zsh-web.git repository (using «gpg
--armor --export $MyEmailAddress»), and then, as part of uploading
a release, we also `cat keys/*.asc` into a zsh-keyring.asc and upload it
to zsh.org.

WDYT?

Cheers,

Daniel

P.S.  Phil also mentioned WKD.  It's a federated way to auto-discover
public keys given an email address.  To be an option, the RMs would
need to add *@zsh.org addresses to their keys, and we'd need to serve
some files from https://openpgpkey.zsh.org/.  Details:
https://wiki.gnupg.org/WKDHosting#Publishing

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2020-07-15  1:00 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-07-13 18:14 Hosting copies of the PGP public keys Daniel Shahaf
2020-07-14  8:17 ` Peter Stephenson
2020-07-14 17:53 ` dana
2020-07-14 18:41   ` Daniel Shahaf
2020-07-15  0:59     ` Phil Pennock

Code repositories for project(s) associated with this public inbox

	https://git.vuxu.org/mirror/zsh/

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).