dashpay / dash

Dash - Reinventing Cryptocurrency
https://www.dash.org
MIT License
1.49k stars 1.2k forks source link

Request that signed releases have published gpg key #2186

Closed kleetus closed 6 years ago

kleetus commented 6 years ago

I am attempting to import Alexander's (UdjinM6) gpg key in order to check the signature of the latest release. I have the fingerprint, of course, but I don't see the key published anywhere (such as PGP Global Directory, SKS Keyservers, MIT PGP server, etc.). I see there was a question on #809 pointing to where Holger has his keys, but I don't see one for Alexander. It would be great to publish this key in one of the key servers. When and if I meet up with you guys, I am happy to sign it.

thephez commented 6 years ago

You can find it on Keybase.io - https://keybase.io/udjinm6. Most, if not all, of the developers should be able to be found there (keybase identities are linked to from the https://www.dash.org/team/ page).

nmarley commented 6 years ago

Also -- I'd like to note that UdjinM6 and Alex are different people, it seems like that might be a point of confusion from the wording of your issue description.

nmarley commented 6 years ago

To expound further, keys for Dash Core developers are actually in the repo here: https://github.com/dashpay/dash/tree/master/contrib/gitian-keys

Those filenames can also be used to search the identities on keybase.io as @thephez has suggested. I'm not sure if there's an actual need or requirement for having keys uploaded to a PGP server, but it looks like about 1/2 the development team has keys published with (e.g.) pgp.mit.edu or keys.gnupg.net.

@kleetus Does this help with your concern?

schinzelh commented 6 years ago

What thephez writes: All our members have their gpg keys published on keybase.io and linked from https://www.dash.org/team/

e.g. Alexander (aka codablock) --> https://keybase.io/codablock

kleetus commented 6 years ago

thanks, I forgot about checking keybase.io. I also got a bit confused over codablock's signature and UdjinM6 actual release.