On Tue, 11 Oct 2016 13:27:26 +0200 Fredrik wrote:
So please reply and attach your public keys if you maintain ports in either opt or xorg!
... and then transmit the fingerprint over a second channel, or at least ensure good trust paths to the keys. Otherwise it's a leap of faith.
Indeed!
Something like this might make it easier to confirm them :) gpg --with-colons --fingerprint fredrik at rinnestam dot se | grep fpr | cut -d ':' -f 10 | hex2words P7Q7950O88O2RPSNQ799R591R574862R61S68R07 fblorna fgrgubfpbcr cerpyhqr nezvfgvpr arjobea cvbarre ghzbe juvzfvpny fgbcjngpu arohyn gbczbfg zvenpyr gbczbfg ulqenhyvp arpxynpr pburerapr snyybhg ibpnyvfg bepn nzhfrzrag 4S5461Q35O847O532R578893PQP9S9868480OP60 qebccre rdhngvba snyybhg fbpvnoyr renfr whcvgre xvpxbss ragrecevfr ohmmneq rfxvzb arjobea zbynffrf fcvaqyr ergebfcrpg jnssyr yrggreurnq zheny vagragvba fubjtvey sbegvghqr 02NP4321RN4S480O9N2NON5OQROQ8Q29143P559O nppehr crargengr pehpvny pnzrybg gebwna qbphzrag qrnqobyg nezvfgvpr chcvy punzoreznvq funqbj rkbqhf gnpgvpf dhnagvgl bcgvp pregvsl onobba pebffbire rqvpg abejrtvna (hint: g?) Pedja