[Privoxy-devel] GPG signatures

[Ian Silvester]

On Mon, 29 Jun 2026, at 07:10, Fabian Keil via Privoxy-devel wrote:
> "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-28 at 19:35:02:
> 
>> On Fri, 26 Jun 2026, at 02:39, Fabian Keil via Privoxy-devel wrote:
>> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-23 at 06:54:42:
>> >
>> >> On Tue, 23 Jun 2026, at 03:03, Fabian Keil via Privoxy-devel wrote:
>> >> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-22 at 10:48:02:
>> >> >
>> >> >> On Sun, 21 Jun 2026, at 03:42, Fabian Keil via Privoxy-devel wrote:
>> >> >> > "Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-06-20 at 15:27:19:
>> >> >> >
>> >> >> >> On Thu, 18 Jun 2026, at 03:11, Fabian Keil via Privoxy-devel wrote:
>> >> >> >
>> >> >> >> > While I suspect that most users don't check the OpenPGP signatures
>> >> >> >> > at all I agree that documenting the keys somewhere on privoxy.org
>> >> >> >> > would be an improvement.
>> >> >> >> 
>> >> >> >> Another option that strikes me is to update PACKAGERS to be current,
>> >> >> >> and include the public keys in there?
>> >> >> >
>> >> >> > I think putting the information into the FAQ or the user manual
>> >> >> > would make it more visible.
>> >> >> 
>> >> >> Yes, fair enough - an FAQ question "How do I verify the authenticity of
>> >> >> Privoxy installation packages?" would be a good solution in my view.
>> >> >
>> >> > Sounds good to me.
>> >> >
>> >> > It's a bit more ambitious than just publishing the OpenPGP fingerprints,
>> >> > though.
>> >> >
>> >> > Do you intend to work on this?
>> >> 
>> >> Sure, why not. I'll plough into docbook formatting hell :) 
>> >> 
>> >> Fabian, Roland, where might I obtain your current pubkeys? 
>> >
>> > My public key is available on the commonly used key servers
>> > like keys.openpgp.org and that seems to be the case for Roland's
>> > public key as well.
>> >
>> > Additionally my public key can be downloaded from my website at [0].
>> 
>> Sorry yes this should have been obvious to me.
>> 
>> I've carefully updated faq.sgml to add the new question and answer,
>> and whilst I was there updated the macOS supported versions in supported.sgml.
>> I don't have a working Openjade setup so I don't immediately have the means to
>> test my changes. Do you have the ability Fabian?
>
> Sure. I've regenerated the FAQ and pushed it to git so you can see the results.

Thanks, I need to fix some line breaks and, ideally, add Lee's public key.

@Lee which email address is your GPG signature linked to? I cannot find ler762 at gmail.com at keys.openpgp.org.

Cheers,

Ian

> Fabian
>
> _______________________________________________
> Privoxy-devel mailing list
> Privoxy-devel at lists.privoxy.org
> https://lists.privoxy.org/mailman/listinfo/privoxy-devel