From: Stephen & Linda Smith Date: Thu, 26 Nov 2015 05:07:36 GMT Subject: Re: Signed tags and git repository Message-ID: <3912454.5IyPOB72Zu@thunderbird> In-Reply-To: <3816223.3lD8Al3iuQ@thunderbird> On Thursday, November 26, 2015 04:56:00 AM Johannes Löthberg wrote: > You don't even need the Web of Trust though, you can just verify the > signature and then check that the key used to make the signature is the > correct one, Ok, but if I don't have a link to the Web or Trust, how do I know that "the key used to make sure the signature is the correct one" (i.e. trusted). sps