From: Thomas Glanzmann <sithglan@stud.uni-erlangen.de>
Date: Sat, 23 Apr 2005 17:54:22 GMT
Subject: Re: Git-commits mailing list feed.
Message-ID: <20050423175422.GA7100@cip.informatik.uni-erlangen.de>
In-Reply-To: <Pine.LNX.4.58.0504231010580.2344@ppc970.osdl.org>

Hello,

there is no need to tell the verifier against what key to verify because
the signature already contains this information.

> If somebody writes a script to generate the above kind of thing (and
> tells me how to validate it), I'll do the rest, and start tagging
> things properly. Oh, and make sure the above sounds sane (ie if
> somebody has a better idea for how to more easily identify how to find
> the public key to check against, please speak up).

# This creates the signature.
gpg --clearsign < sign_this > signature

# And this verifies it. 
gpg --verify < signature && echo valid

	Thomas