Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign upGitHub is where the world builds software
Millions of developers and companies build, ship, and maintain their software on GitHub — the largest and most advanced development platform in the world.
Post gpg signing keys on GitHub or homepage? OpenPGP sks keyserver system is fatally flawed. #21689
Comments
|
No opinions on this? |
|
Thanks for that. |
Checklist
Description
The OpenPGP sks keyserver system is broken.[1,2] Could you post copies of your signing keys here on GitHub or on the homepage as a workaround? Perhaps you could also start signing with OpenBSD's signify or minisign too?[3,4,5]
Thank you.
Thanks for youtube-dl too. It's indispensable👍
[1] https://news.ycombinator.com/item?id=20312826
[2] https://news.ycombinator.com/item?id=20370385
[3] https://blog.gtank.cc/modern-alternatives-to-pgp/
[4] https://github.com/aperezdc/signify
[5] https://jedisct1.github.io/minisign/