[Commotion-dev] Verifying signatures

[Josh King]

I don't know of one that is geared towards people that may not have used
GPG before. Apache has a pretty comprehensive overview of
release-signing in general, though:

https://www.apache.org/dev/release-signing.html

Technical, but a good resource to draw from.

On Wed 05 Jun 2013 04:32:47 PM EDT, Andrew Reynolds wrote:
> I've seen a couple of decent walkthroughs but they're all either written
> for a specific software package (e.g., tor's page) or a specific
> operating system.
>
> I suspect we could cherry pick from several pages faster than we could
> find one well written page that covers exactly what we need.
>
> -andrew
>
> On 06/05/2013 04:03 PM, Dan Staples wrote:
>> I'm in the process of adding signatures to the binaries on our Download
>> page. I wanted to get folks' opinions on how to best instruct users on
>> how to verify GPG signatures. The best resource we've found is Tor's
>> page: https://www.torproject.org/docs/verifying-signatures.html.en, but
>> it is a bit too specific to Tor itself in my opinion, and so we probably
>> wouldn't want to just link to it and leave it at that.
>>
>> Does anyone else know of any good tutorials on how to verify GPG
>> signatures, tailored for someone who might not have even used GPG
>> before? If we can't find something better than Tor's instructions, I
>> might just write up our own tutorial tailored to Commotion, borrowing a
>> lot from Tor's page.
>>
>> Dan
>>
>
>
>
>
> _______________________________________________
> Commotion-dev mailing list
> Commotion-dev at lists.chambana.net
> https://lists.chambana.net/mailman/listinfo/commotion-dev

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: OpenPGP digital signature
URL: <http://lists.chambana.net/pipermail/commotion-dev/attachments/20130605/36fa4911/attachment.sig>