Hello,

    I down loaded ddrescue-1.29.tar.lz <https://ftp.wayne.edu/gnu/ddrescue/ddrescue-1.29.tar.lz> and related .sig from https://ftp.wayne.edu/gnu/ddrescue/ and since it am more used to independent hashes it took me a minute to realize I needed gpg but I can't seem to find a download link for your public key, which is suppose to be public.  I stumbled on the list archive discussion and found your release announcement  which includes "gpg --recv-keys 8FE99503132D7742' which fails since Ii am working on an isolated system.  Can I suggest that you post a copy of your public key somewhere on https://www.gnu.org/software/ddrescue/ddrescue.html or maybe https://savannah.gnu.org/projects/ddrescue/ .  Yes, I know that if someone went though the trouble to modify the download and signature, they could likely also provide a copy of the key used to sign it, but if you posted they key publickly it would also be easier for someone to confirm it matches.


Thanks,

Robert

Reply via email to