From: Gaston Fiore <gaston.fiore@gmail.com>
Date: Tue, 22 Jun 2010 00:07:20 GMT
Subject: DSA key
Message-ID: <3E984B93-F2DB-4F32-BBF9-C6DA3730C54E@gmail.com>

Hello,

I'm trying to verify the download of Git and I get the following:

gbrain:Downloads gafiore$ gpg --verify git-1.7.1.tar.bz2.sign 
gpg: Signature made Fri Apr 23 22:49:17 2010 EDT using DSA key ID 517D0F0E
gpg: Can't check signature: public key not found

How do I know whether I should trust the downloaded file?

Thanks,

-Gaston