On Wed, Jul 20, 2011 at 10:58:32AM +0100, Kai Hendry wrote:
> On 20 July 2011 10:54, Nick <suckless-dev_AT_njw.me.uk> wrote:
> > wget http://dl.suckless.org/tools/dmenu-4.4.tar.gz.sig
> > gpg --verify dmenu-0.4.tar.gz.sig
> > is not that tricky.
>
> You've skipped over the part of how you exchange the public key, no?
Just upload it to suckless.org and/or some key servers.
> If it's not that tricky why doesn't Arch for example build it in to their tools?
pacman 4.0.0 will support package signatures and we'll sign all packages
in the official repos ([core], [extra], [community]) soon.
>
> And btw gpg sucks big time. :)
Received on Wed Jul 20 2011 - 12:06:49 CEST
This archive was generated by hypermail 2.2.0 : Wed Jul 20 2011 - 12:24:04 CEST