From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephen & Linda Smith Subject: Re: Signed tags and git repository Date: Wed, 25 Nov 2015 22:07:36 -0700 Message-ID: <3912454.5IyPOB72Zu@thunderbird> References: <3816223.3lD8Al3iuQ@thunderbird> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart7495607.fI08RMCs7y"; micalg="pgp-sha256"; protocol="application/pgp-signature" To: git@vger.kernel.org, Johannes =?ISO-8859-1?Q?L=F6thberg?= X-From: git-owner@vger.kernel.org Thu Nov 26 06:07:36 2015 Return-path: Envelope-to: gcvg-git-2@plane.gmane.org Received: from vger.kernel.org ([209.132.180.67]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1a1omL-0001gi-Q2 for gcvg-git-2@plane.gmane.org; Thu, 26 Nov 2015 06:07:34 +0100 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1750786AbbKZFH2 (ORCPT ); Thu, 26 Nov 2015 00:07:28 -0500 Received: from fed1rmfepo201.cox.net ([68.230.241.146]:37794 "EHLO fed1rmfepo201.cox.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750711AbbKZFH0 (ORCPT ); Thu, 26 Nov 2015 00:07:26 -0500 Received: from fed1rmimpo109 ([68.230.241.158]) by fed1rmfepo201.cox.net (InterMail vM.8.01.05.15 201-2260-151-145-20131218) with ESMTP id <20151126050725.LDIR10284.fed1rmfepo201.cox.net@fed1rmimpo109> for ; Thu, 26 Nov 2015 00:07:25 -0500 Received: from thunderbird ([68.231.74.134]) by fed1rmimpo109 with cox id m57R1r0042tqoqC0157RBb; Thu, 26 Nov 2015 00:07:25 -0500 X-CT-Class: Clean X-CT-Score: 0.00 X-CT-RefID: str=0001.0A020204.5656938D.00F8,ss=1,re=0.000,fgs=0 X-CT-Spam: 0 X-Authority-Analysis: v=2.0 cv=AZNv6QrG c=1 sm=1 a=/Rt4pg3TtX3KzfzhvVoEow==:17 a=kviXuzpPAAAA:8 a=qtqOOiqGOCEA:10 a=CNC-ILQiZ6rS6a9m4bMA:9 a=wPNLvfGTeEIA:10 a=ACDOu9pH71MA:10 a=Eb5P3iG-Cg48dJb9:21 a=H49I5Zy6KP5tsp5r:21 a=8Ycc5uBOPi8OPSky6-QA:9 a=/Rt4pg3TtX3KzfzhvVoEow==:117 X-CM-Score: 0.00 Authentication-Results: cox.net; none Received: from thunderbird.localnet (thunderbird [127.0.0.1]) by thunderbird (Postfix) with ESMTP id 89C9913F66E; Wed, 25 Nov 2015 22:07:36 -0700 (MST) User-Agent: KMail/5.0.2 (Linux/4.2.0-19-generic; KDE/5.15.0; x86_64; ; ) Sender: git-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: git@vger.kernel.org Archived-At: --nextPart7495607.fI08RMCs7y Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" On Thursday, November 26, 2015 04:56:00 AM Johannes L=F6thberg wrote: > You don't even need the Web of Trust though, you can just verify the=20 > signature and then check that the key used to make the signature is the=20 > correct one,=20 Ok, but if I don't have a link to the Web or Trust, how do I know that "the key used to make sure the signature is the correct one" (i.e. trusted). sps --nextPart7495607.fI08RMCs7y Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJWVpOYAAoJEBbmMR/e6CDNlQIP/R8BqCgw+VvAE2hXAFsK94f2 o1Yyf7e03VQ4njTGZqBviFPU2l4QFxoKwzg5RI1z64ljlZBs9CCatyTBgdCCqXOi JGYgxO1UaP9qrbh/+GlMIgWcFHY9Og/vcf15mL/W2jNqMYsxvWuXCc6T+iaE/uBM N75uaSqSDdZA8rS6wRESEhMrzkrE4M7Gar/5kKZlA+640hK5lfumLRAlwMZiz/5j qxfVg2QlsojmYNfwjVkhDZwf240J+8lpG1Ad4JzuAHYLZty2elcTh8g1C6FeEMx/ b0jYgiPRoMQ0/sGls7251u47CEfV1AjfQjYpJNx6peP9aJIoL7EjsDdHGOpy9YP+ wqV/RaFWFRb8RPvSZpaJQEnKwKZVI0hR6TcAZoOdupvRwcia95JSZI3QTh1Hlsr4 0vSmBkxSELMNV16PgljrA1LXd4OPznhrM3bL7l9CclWFCnAY+7/7q4zNUpIU2SHk E+I3TPDIJp+42+2pjAlfHdlMVOnhztwvaHrDbJV4KB4EizV9Jp2BgsXURsRZKa/H h8Ud0++CQjgXcY5uMAqCgmtJ4Fr/YQ0wp1POPBPYHDP8RZSYdV/5e099i/LEC3pW lGP4+nC7DZuZJYEwbiDGy0HW5cjhfCY+4grAd1jZiE6HvKg/TWeksWBH9gVT07p2 wwti6pZljl9buai91rTs =UAjH -----END PGP SIGNATURE----- --nextPart7495607.fI08RMCs7y--