[Privoxy-devel] GPG signatures

[Fabian Keil]

"Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-28 at 19:35:02:
 
> On Fri, 26 Jun 2026, at 02:39, Fabian Keil via Privoxy-devel wrote:
> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-23 at 06:54:42:
> >
> >> On Tue, 23 Jun 2026, at 03:03, Fabian Keil via Privoxy-devel wrote:
> >> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-22 at 10:48:02:
> >> >
> >> >> On Sun, 21 Jun 2026, at 03:42, Fabian Keil via Privoxy-devel wrote:
> >> >> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-20 at 15:27:19:
> >> >> >
> >> >> >> On Thu, 18 Jun 2026, at 03:11, Fabian Keil via Privoxy-devel wrote:
> >> >> >
> >> >> >> > While I suspect that most users don't check the OpenPGP signatures
> >> >> >> > at all I agree that documenting the keys somewhere on privoxy.org
> >> >> >> > would be an improvement.
> >> >> >> 
> >> >> >> Another option that strikes me is to update PACKAGERS to be current,
> >> >> >> and include the public keys in there?
> >> >> >
> >> >> > I think putting the information into the FAQ or the user manual
> >> >> > would make it more visible.
> >> >> 
> >> >> Yes, fair enough - an FAQ question "How do I verify the authenticity of
> >> >> Privoxy installation packages?" would be a good solution in my view.
> >> >
> >> > Sounds good to me.
> >> >
> >> > It's a bit more ambitious than just publishing the OpenPGP fingerprints,
> >> > though.
> >> >
> >> > Do you intend to work on this?
> >> 
> >> Sure, why not. I'll plough into docbook formatting hell :) 
> >> 
> >> Fabian, Roland, where might I obtain your current pubkeys? 
> >
> > My public key is available on the commonly used key servers
> > like keys.openpgp.org and that seems to be the case for Roland's
> > public key as well.
> >
> > Additionally my public key can be downloaded from my website at [0].
> 
> Sorry yes this should have been obvious to me.
> 
> I've carefully updated faq.sgml to add the new question and answer,
> and whilst I was there updated the macOS supported versions in supported.sgml.
> I don't have a working Openjade setup so I don't immediately have the means to
> test my changes. Do you have the ability Fabian?

Sure. I've regenerated the FAQ and pushed it to git so you can see the results.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20260629/067804b5/attachment.bin>