Figure out our release signing process

lbryio / lbry-sdk

The LBRY SDK for building decentralized, censorship resistant, monetized, digital content apps.

https://lbry.com

MIT License

7.19k stars 482 forks source link

Open lyoshenka opened 2 years ago

lyoshenka commented 2 years ago

Ideally:

[ ] there's a single main key that delegates trust to the release signing keys
[ ] remove references to Keybase since that's basically dead
[ ] update https://lbry.com/faq/pgp-key to explain our policy and how to verify releases
[ ] include lbry-desktop and lbcd in this system as well