Re: [gentoo-dev] GitHub GPG Signature Verification

2016-04-06 Thread Daniel Campbell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 04/06/2016 10:52 AM, NP-Hardass wrote:
> Greetings all,
> 
> As of yesterday, GitHub now supports GPG signature verification
> [1]. As a result, when viewed through the GitHub mirror, all
> commits now have a widget that displays whether the GPG signature
> has been verified (via GitHub).  To help facilitate this, it is
> highly recommend that all developers who use GitHub update their
> accounts to include their GPG public key [2] so that their commits
> can register as verified, where applicable.
> 
> Just a disclaimer, I'm not endorsing the use of GitHub, nor
> advocating for it, simply indicating a new feature which it would
> be nice to see Gentoo developers on GitHub taking advantage of.
> 
> 
I noticed this as well and put my GPG key up yesterday. So my commits
should show up correctly. I'll have to check the mirror to see if
things are working on their end.
- -- 
Daniel Campbell - Gentoo Developer
OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net
fpr: AE03 9064 AE00 053C 270C  1DE4 6F7A 9091 1EA0 55D6
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=QkGH
-END PGP SIGNATURE-



Re: [gentoo-dev] GitHub GPG Signature Verification

2016-04-06 Thread Richard Yao
On 04/06/2016 01:52 PM, NP-Hardass wrote:
> Greetings all,
> 
> As of yesterday, GitHub now supports GPG signature verification [1].
> As a result, when viewed through the GitHub mirror, all commits now
> have a widget that displays whether the GPG signature has been
> verified (via GitHub).  To help facilitate this, it is highly
> recommend that all developers who use GitHub update their accounts to
> include their GPG public key [2] so that their commits can register as
> verified, where applicable.
> 
> Just a disclaimer, I'm not endorsing the use of GitHub, nor advocating
> for it, simply indicating a new feature which it would be nice to see
> Gentoo developers on GitHub taking advantage of.
> 
> 

Thanks for letting us know. :)



signature.asc
Description: OpenPGP digital signature


[gentoo-dev] GitHub GPG Signature Verification

2016-04-06 Thread NP-Hardass
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Greetings all,

As of yesterday, GitHub now supports GPG signature verification [1].
As a result, when viewed through the GitHub mirror, all commits now
have a widget that displays whether the GPG signature has been
verified (via GitHub).  To help facilitate this, it is highly
recommend that all developers who use GitHub update their accounts to
include their GPG public key [2] so that their commits can register as
verified, where applicable.

Just a disclaimer, I'm not endorsing the use of GitHub, nor advocating
for it, simply indicating a new feature which it would be nice to see
Gentoo developers on GitHub taking advantage of.

- -- 
NP-Hardass

[1] https://github.com/blog/2144-gpg-signature-verification
[2] https://github.com/settings/keys
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=TanJ
-END PGP SIGNATURE-