git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Signed tags and git repository

From
SSStephen & Linda Smith <ischis2@cox.net>
Date
Nov 26, 2015, 05:07 UTC
Message-ID
<3912454.5IyPOB72Zu@thunderbird>
In-Reply-To
<3816223.3lD8Al3iuQ@thunderbird>
On Thursday, November 26, 2015 04:56:00 AM Johannes Löthberg wrote:
> You don't even need the Web of Trust though, you can just verify the 
> signature and then check that the key used to make the signature is the 
> correct one,

Ok, but if I don't have a link to the Web or Trust, how do I know that "the key used to make sure the signature is the correct one" (i.e. trusted).

sps
Previous: Johannes Löthberg
Message 3 of 3 in “Signed tags and git repository”
  1. Stephen & Linda SmithNov 25, 2015
  2. Johannes LöthbergNov 26, 2015
  3. Stephen & Linda SmithNov 26, 2015

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.