[tor-project] Expanding our people page
dau at riseup.net
Fri Jul 14 03:53:35 UTC 2017
On Thu, Jul 13, 2017 at 11:00:01AM -0700, Damian Johnson wrote:
> Hi everyone! If you haven't already please check your pgp key on...
> The one I initially pulled from the MIT keyserver for Roger turned out
> to be a fake. For folks who sent me an attachment with their public
> key I used that, but for everybody else I simply snagged what I could
> find. Feel free to shoot me a copy of your public key if you want to
> be extra sure it's right.
Maybe not too related to this, but it would be great if a similar work
was done to the "Verify package signatures"  and "Signing keys" 
pages. Making some integration to db.torproject.org may be too much
work, but just reviewing those and using long key ids would be nice.
Among the short key ids in  is Roger's and that makes it easy for
people to get the fake one by distraction.
P.S. Great work on the people page, Damian!
More information about the tor-project