signing releases with gpg

langerhans / multidoge

MultiDoge is a desktop Dogecoin client, powered by dogecoinj. Ported from the MultiBit Bitcoin client.

http://multidoge.org

MIT License

257 stars 110 forks source link

Open ghost opened 3 years ago

ghost commented 3 years ago

Correct me if I'm mistaken. I could not find any signed releases (Linux).

Could you please sign your releases with a gpg key (And publish your public key)? gpg

Alternatively (the cooler way of doing much security) you could release the sha256sums of the releases files and then sign these.

Is there a particular reason for you not signing your releases?

I would love to buy much DOGE and get rich, but this security issue bothers me...

giammin commented 3 years ago

did you notice the last code change were in 2016

ReverseControl commented 2 years ago

@patricklodder @rnicoll @michilumin Could you please address this issue?