4 ms·
How are we supposed to verify keys.asc? (To be a bit more explicit: searching for either the pub (57F6FB06) or sub(0E46390F) keys on hkps.pool.sks-keyservers.
by frabbit 9y ago
How are we supposed to verify keys.asc?
(To be a bit more explicit: searching for either the pub (57F6FB06) or sub(0E46390F) keys on hkps.pool.sks-keyservers.net returns no result)
- mfwoods 9y agoJust because it's on a keyserver doesn't mean it's trustworthy. Keyservers do no verification of any kind on the keys they host. If you(r system) trust the certificate that https://updates.signal.org/ https://updates.signal.org/ is using, you should be confident that you are getting the correct keys. (You shouldn't trust a stranger on the internet, but I am getting the same keys when I download them.)