Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Post gpg signing keys on GitHub or homepage? OpenPGP sks keyserver system is fatally flawed. #21689

Closed
EauBureau opened this issue Jul 8, 2019 · 3 comments

Comments

@EauBureau
Copy link

@EauBureau EauBureau commented Jul 8, 2019

Checklist

  • I'm reporting a site feature request
  • I've verified that I'm running youtube-dl version 2019.07.02
  • I've searched the bugtracker for similar site feature requests including closed ones

Description

The OpenPGP sks keyserver system is broken.[1,2] Could you post copies of your signing keys here on GitHub or on the homepage as a workaround? Perhaps you could also start signing with OpenBSD's signify or minisign too?[3,4,5]

Thank you.

Thanks for youtube-dl too. It's indispensable 👍

[1] https://news.ycombinator.com/item?id=20312826
[2] https://news.ycombinator.com/item?id=20370385
[3] https://blog.gtank.cc/modern-alternatives-to-pgp/
[4] https://github.com/aperezdc/signify
[5] https://jedisct1.github.io/minisign/

@EauBureau
Copy link
Author

@EauBureau EauBureau commented Aug 30, 2019

No opinions on this?

@dstftw
Copy link
Collaborator

@dstftw dstftw commented Aug 30, 2019

@dstftw dstftw closed this Aug 30, 2019
@EauBureau
Copy link
Author

@EauBureau EauBureau commented Aug 31, 2019

Thanks for that.
Any chance you could put those two links on the official download page or on the README.md on the official GitHub page?
Save others having to fumble around for them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants
You can’t perform that action at this time.