Thanks Anselm, this sounds awesome!
Anselm R Garbe:
> - (optional) repo owners/maintainers should sign their future git tags
> for release creation by using their own private PGP key.
I suggest distributing OpenPGP-keys via the keyserver pool [0] *without*
self-hosting a copy. The point of keyservers is to allow faster
distribution of changes like signatures, revocations, expirations
- in an automated way [1, 2].
0.
https://sks-keyservers.net/
1.
https://github.com/ilf/gpg-maintenance
2.
https://github.com/EtiennePerot/parcimonie.sh
--
ilf
Über 80 Millionen Deutsche benutzen keine Konsole. Klick dich nicht weg!
-- Eine Initiative des Bundesamtes für Tastaturbenutzung
Received on Mon Aug 28 2017 - 16:33:41 CEST