Hello,
I down loaded ddrescue-1.29.tar.lz
<https://ftp.wayne.edu/gnu/ddrescue/ddrescue-1.29.tar.lz> and related
.sig from https://ftp.wayne.edu/gnu/ddrescue/ and since it am more used
to independent hashes it took me a minute to realize I needed gpg but I
can't seem to find a download link for your public key, which is suppose
to be public. I stumbled on the list archive discussion and found your
release announcement which includes "gpg --recv-keys 8FE99503132D7742'
which fails since Ii am working on an isolated system. Can I suggest
that you post a copy of your public key somewhere on
https://www.gnu.org/software/ddrescue/ddrescue.html or maybe
https://savannah.gnu.org/projects/ddrescue/ . Yes, I know that if
someone went though the trouble to modify the download and signature,
they could likely also provide a copy of the key used to sign it, but if
you posted they key publickly it would also be easier for someone to
confirm it matches.
Thanks,
Robert
- Suggestion for gpg keys Bug reports for ddrescue, data recovery tool.
-