doc: Suggest keys.openpgp.org as keyserver in SECURITY.md
#23466
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This is in line with 4c43b7d from PR bitcoin#22688.
Contributor
Author
|
A related issue is that I couldn't find an unexpired version of @sipa's key, neither on |
Member
|
review ACK 90f1f84 |
Member
|
Wouldn't it make sense to update https://bitcoincore.org/en/contact/ as well, assuming that |
Contributor
Author
|
Member
|
I think they don't accept any key updates, do they? |
Member
|
Review ACK 90f1f84
I agree. Ideally we would not have to suggest any keyserver. It's frustrating enough to have to play keyserver ping-pong every time when yet another part of PGP infrastructure goes down, but it seems BTW instead of adding it in the command line every time you could also add in |
real-or-random
added a commit
to real-or-random/secp256k1
that referenced
this pull request
Nov 8, 2021
This is in line with bitcoin/bitcoin#23466 .
real-or-random
added a commit
to real-or-random/secp256k1
that referenced
this pull request
Nov 8, 2021
This is in line with bitcoin/bitcoin#23466 .
fanquake
added a commit
to bitcoin-core/gui
that referenced
this pull request
Nov 8, 2021
…rver in SECURITY.md 90f1f84 doc: Suggest `keys.openpgp.org` as keyserver in SECURITY.md (Tim Ruffing) Pull request description: `--recv-keys` without a `--keyserver` arg simply failed for me on a fresh Arch Linux installation, so I think it's a good idea to suggest a keyserver. OpenPGP ecosystem is broken in a number of ways, so the right way to approach this issue has some potential for bikeshedding. But the only thing that this PR does is to keep `SECURITY.md` in line with the instructions for builder keys, where there was agreement on switching to `keys.openpgp.org` (#22688). ACKs for top commit: MarcoFalke: review ACK 90f1f84 laanwj: Review ACK 90f1f84 hebasto: ACK 90f1f84, agree with arguments above. Zero-1729: ACK 90f1f84 Tree-SHA512: 1ab20c837cd952aa32b57473772cbfd33411a08db6e88b951bce38f76a3c509c0e91d6944ec0ca5eac8d5eb4d98a5489276d55691328f2e2556b2640f8e7c108
Member
|
This has been merged. |
real-or-random
added a commit
to bitcoin-core/secp256k1
that referenced
this pull request
Nov 9, 2021
3b157c4 doc: Suggest keys.openpgp.org as keyserver in SECURITY.md (Tim Ruffing) 73a7472 doc: Replace apoelstra's GPG key by jonasnick's GPG key (Tim Ruffing) Pull request description: I have verified the new key via other secure channels. This closes #1003 . We can skip the second commit but I expect bitcoin/bitcoin#23466 to be merged. If it won't be merged, we could still revert. ACKs for top commit: sipa: ACK 3b157c4. I've also verified the key out of band. jonasnick: ACK 3b157c4 Tree-SHA512: 496f98121f14031bc693aa83bf208b253f79b700b4bca0b629deadc8852f76ef6d69ad90109baa771d7b9f6e4b983e4ed8dca404cf5aceffe9d520d3362b533a
real-or-random
added a commit
to real-or-random/bitcoincore.org
that referenced
this pull request
Nov 9, 2021
sidhujag
pushed a commit
to syscoin/syscoin
that referenced
this pull request
Nov 9, 2021
…SECURITY.md 90f1f84 doc: Suggest `keys.openpgp.org` as keyserver in SECURITY.md (Tim Ruffing) Pull request description: `--recv-keys` without a `--keyserver` arg simply failed for me on a fresh Arch Linux installation, so I think it's a good idea to suggest a keyserver. OpenPGP ecosystem is broken in a number of ways, so the right way to approach this issue has some potential for bikeshedding. But the only thing that this PR does is to keep `SECURITY.md` in line with the instructions for builder keys, where there was agreement on switching to `keys.openpgp.org` (bitcoin#22688). ACKs for top commit: MarcoFalke: review ACK 90f1f84 laanwj: Review ACK 90f1f84 hebasto: ACK 90f1f84, agree with arguments above. Zero-1729: ACK 90f1f84 Tree-SHA512: 1ab20c837cd952aa32b57473772cbfd33411a08db6e88b951bce38f76a3c509c0e91d6944ec0ca5eac8d5eb4d98a5489276d55691328f2e2556b2640f8e7c108
harding
added a commit
to bitcoin-core/bitcoincore.org
that referenced
this pull request
Nov 9, 2021
d1492b6 Suggest `keys.openpgp.org` as keyserver (Tim Ruffing) Pull request description: See bitcoin/bitcoin#23466 ACKs for top commit: Zero-1729: ACK d1492b6 Tree-SHA512: c40201aad0bd49ada9dc2dbded6f8f75944f6951e5ea71068cf4e3a175ce1778869b8acd99c39c69312f023878979366cdf7653d22babc0f5c7c3d7d0c265672
PastaPastaPasta
pushed a commit
to PastaPastaPasta/dash
that referenced
this pull request
Apr 3, 2022
…SECURITY.md 90f1f84 doc: Suggest `keys.openpgp.org` as keyserver in SECURITY.md (Tim Ruffing) Pull request description: `--recv-keys` without a `--keyserver` arg simply failed for me on a fresh Arch Linux installation, so I think it's a good idea to suggest a keyserver. OpenPGP ecosystem is broken in a number of ways, so the right way to approach this issue has some potential for bikeshedding. But the only thing that this PR does is to keep `SECURITY.md` in line with the instructions for builder keys, where there was agreement on switching to `keys.openpgp.org` (bitcoin#22688). ACKs for top commit: MarcoFalke: review ACK 90f1f84 laanwj: Review ACK 90f1f84 hebasto: ACK 90f1f84, agree with arguments above. Zero-1729: ACK 90f1f84 Tree-SHA512: 1ab20c837cd952aa32b57473772cbfd33411a08db6e88b951bce38f76a3c509c0e91d6944ec0ca5eac8d5eb4d98a5489276d55691328f2e2556b2640f8e7c108
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
7 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
--recv-keyswithout a--keyserverarg simply failed for me on a fresh Arch Linux installation, so I think it's a good idea to suggest a keyserver. OpenPGP ecosystem is broken in a number of ways, so the right way to approach this issue has some potential for bikeshedding. But the only thing that this PR does is to keepSECURITY.mdin line with the instructions for builder keys, where there was agreement on switching tokeys.openpgp.org(#22688).