[Privoxy-devel] GPG signatures

[Ian Silvester]

On Tue, 23 Jun 2026, at 03:03, Fabian Keil via Privoxy-devel wrote:
> "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-22 at 10:48:02:
>
>> On Sun, 21 Jun 2026, at 03:42, Fabian Keil via Privoxy-devel wrote:
>> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-20 at 15:27:19:
>> >
>> >> On Thu, 18 Jun 2026, at 03:11, Fabian Keil via Privoxy-devel wrote:
>> >
>> >> > While I suspect that most users don't check the OpenPGP signatures
>> >> > at all I agree that documenting the keys somewhere on privoxy.org
>> >> > would be an improvement.
>> >> 
>> >> Another option that strikes me is to update PACKAGERS to be current,
>> >> and include the public keys in there?
>> >
>> > I think putting the information into the FAQ or the user manual
>> > would make it more visible.
>> 
>> Yes, fair enough - an FAQ question "How do I verify the authenticity of
>> Privoxy installation packages?" would be a good solution in my view.
>
> Sounds good to me.
>
> It's a bit more ambitious than just publishing the OpenPGP fingerprints,
> though.
>
> Do you intend to work on this?

Sure, why not. I'll plough into docbook formatting hell :) 

Fabian, Roland, where might I obtain your current pubkeys? 

Ian

P.S. The Apple Silicon installer is now published on my mirror and SF. 



>
> Fabian
>
> _______________________________________________
> Privoxy-devel mailing list
> Privoxy-devel at lists.privoxy.org
> https://lists.privoxy.org/mailman/listinfo/privoxy-devel