From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=MAILING_LIST_MULTI, RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 5679 invoked from network); 11 Jul 2020 04:24:57 -0000 Received: from ns1.primenet.com.au (HELO primenet.com.au) (203.24.36.2) by inbox.vuxu.org with ESMTPUTF8; 11 Jul 2020 04:24:57 -0000 Received: (qmail 9652 invoked by alias); 11 Jul 2020 04:24:47 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: List-Unsubscribe: Sender: zsh-workers@zsh.org X-Seq: 46233 Received: (qmail 20240 invoked by uid 1010); 11 Jul 2020 04:24:47 -0000 X-Qmail-Scanner-Diagnostics: from mail-io1-f46.google.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.102.3/25863. spamassassin: 3.4.4. Clear:RC:0(209.85.166.46):SA:0(-1.9/5.0):. Processed in 1.651609 secs); 11 Jul 2020 04:24:47 -0000 X-Envelope-From: dana@dana.is X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | Received-SPF: pass (ns1.primenet.com.au: SPF record at _netblocks.google.com designates 209.85.166.46 as permitted sender) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=GmpHN89brPUVYJ022I78lXvi+S1cxOAvpHQLa0BSZj0=; b=Wt4xj0rvAYsUX8Z91CubcU3rQRqOezNs8oc0VUxhcpdp4jUTdboX8Vg0mVgHt0b7eR 4e660SVKft68DIlUbzTFp+PhcITv5Mz73yObeGACXvYUm/ZkFTxQZOhp3GhoeFbn0Ci8 QH6Gy9UrmQQPtGDOhlaYOVH3xyk5yL6nzSrT0l8rHAcyIMcCSgp0Wa++jEU9ZEZpsPcj Hj9x1+GnkYnjbLQ0QKgLI8JaLmPyQCPYAZfB6HS3v6R2WuTq3GGE5c5n/9vaf2RURoe6 qKq/xnYa5D2xSx9WFpm5yUwX4JkVMasp1cB3aSzCiiG/STR6iRORtKjUMATYDaJ0gxbu 4fOA== X-Gm-Message-State: AOAM5310a3RYrqsiOjb9cJiv+P6uc949F0mNcWBbnbwbQ6CngTvkepXy +MnfRGRj02uVH/xSQYGyRnjTYMSvAjc= X-Google-Smtp-Source: ABdhPJyFK2UnYHZDzQ7WbymUBTJ0l54jc/BS62Fc31h4OhDJta+e0HpiIyuLyDCt6Xqkpj76k/DTnA== X-Received: by 2002:a6b:4409:: with SMTP id r9mr49787601ioa.158.1594441451922; Fri, 10 Jul 2020 21:24:11 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Subject: Re: gpg key used to sign zsh tarball has no trusted signatures so how can I trust it? From: dana In-Reply-To: <20200710234922.50f0fa4a@tarpaulin.shahaf.local2> Date: Fri, 10 Jul 2020 23:25:35 -0500 Cc: vapnik spaknik , Zsh hackers list Content-Transfer-Encoding: 7bit Message-Id: References: <1130466066.9798.1594417647695.ref@mail.yahoo.com> <1130466066.9798.1594417647695@mail.yahoo.com> <20200710234922.50f0fa4a@tarpaulin.shahaf.local2> To: Daniel Shahaf X-Mailer: Apple Mail (2.3608.80.23.2.2) On 10 Jul 2020, at 18:49, Daniel Shahaf wrote: > Agreed it'd be a good thing. Yeah. I meant to get it sorted before, there just wasn't a convenient opportunity. I'm not very familiar with GPG trust etiquette, but if there's a good way we can establish trust remotely the next time we're collaborating or w/e that'd be OK with me dana