New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Readme: add note to obtain GPG key via other channel #1095

Open

xaur opened this issue Dec 11, 2017 · 0 comments

xaur commented Dec 11, 2017

In some other project that includes GPG keys in its repo I saw an interesting warning:

Even though this key is also included in this repo, you should make sure to obtain the master key fingerprint via some other channel, as you can be sure that if you were getting a falsified Qubes Security Pack it would contain a falsified master key as well.

It seems reasonable to note it in the readme.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment