Skip to content

PGP signature on the SHA256SUM.asc file #1303

@maximusmaximalistus

Description

@maximusmaximalistus

There is no mention on the repository on how to verify the authenticity of the files released.
The last SHA256SUM.asc was signed by the PGP key 0xBD0F3062F87842410B06A0432F656B0610604482 from pgreco@blockstream.com.asc .
But there is no reference in the github to this key on how to verify the authenticity of the releases.
I suggest that the README.md could provide this info. Or since different releases can be signed by different people. That this info be provided in each release comments like in here https://github.com/ElementsProject/elements/releases/tag/elements-23.2.1

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions