On Sat, 28 May 2005, imacat wrote: > This is imacat from Taiwan. I was downloading GCC 3.3.6. I saw it > was signed by PGP key 902C9419, and it displayed its owner as Gabriel > Dos Reis. But I can't find any other public source that can prove this > key as her/his, not even on GCC website http://gcc.gnu.org/ or Savannah. > Did I miss something? Is that key 902C9419 really her/his? Could > someone confirm about this, or better, publish that PGP signing key > somewhere, on GCC website? Thank you.
Gaby added his key to the website now, but I agree that we should make sure the keys are sufficiently well signed by other members of the free software (or open source) community. Many of us will meet at the GCC Summit next month in Ottawa, and I suggest we all make sure to improve the web of trust in the GCC community (and especially as far as the release managers are concerned). Gerald
