{"thread":{"id":"24162","subject":"DSA key","startedAt":"2010-06-22T00:07:20Z","lastAt":"2010-06-22T00:16:54Z","messageCount":2,"participants":["Gaston Fiore","J.H."],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"144018","messageId":"3E984B93-F2DB-4F32-BBF9-C6DA3730C54E@gmail.com","threadId":"24162","inReplyTo":null,"subject":"DSA key","fromName":"Gaston Fiore","fromEmail":"gaston.fiore@gmail.com","sentAt":"2010-06-22T00:07:20Z","receivedAt":"2010-06-22T00:07:20Z","isPatch":false,"sender":{"key":"gaston.fiore@gmail.com","avatar":null},"body":"Hello,\n\nI'm trying to verify the download of Git and I get the following:\n\ngbrain:Downloads gafiore$ gpg --verify git-1.7.1.tar.bz2.sign \ngpg: Signature made Fri Apr 23 22:49:17 2010 EDT using DSA key ID 517D0F0E\ngpg: Can't check signature: public key not found\n\nHow do I know whether I should trust the downloaded file?\n\nThanks,\n\n-Gaston\n"},{"id":"144019","messageId":"4C2000F6.3020405@kernel.org","threadId":"24162","inReplyTo":"3E984B93-F2DB-4F32-BBF9-C6DA3730C54E@gmail.com","subject":"Re: DSA key","fromName":"J.H.","fromEmail":"warthog9@kernel.org","sentAt":"2010-06-22T00:16:54Z","receivedAt":"2010-06-22T00:16:54Z","isPatch":false,"sender":{"key":"warthog9@kernel.org","avatar":"https://avatars.githubusercontent.com/u/2334704?v=4"},"body":"Gaston,\n\nYou might want to try:\n\ngpg --recv-keys 517D0F0E\n\nor read the following information on gpg signatures from kernel.org:\n\nhttp://www.kernel.org/signature.html\n\n- John 'Warthog9' Hawley\n\nOn 06/21/2010 05:07 PM, Gaston Fiore wrote:\n> Hello,\n> \n> I'm trying to verify the download of Git and I get the following:\n> \n> gbrain:Downloads gafiore$ gpg --verify git-1.7.1.tar.bz2.sign \n> gpg: Signature made Fri Apr 23 22:49:17 2010 EDT using DSA key ID 517D0F0E\n> gpg: Can't check signature: public key not found\n> \n> How do I know whether I should trust the downloaded file?\n> \n> Thanks,\n> \n> -Gaston\n> \n> --\n> To unsubscribe from this list: send the line \"unsubscribe git\" in\n> the body of a message to majordomo@vger.kernel.org\n> More majordomo info at  http://vger.kernel.org/majordomo-info.html\n"}]}