On 20 July 2011 10:54, Nick <suckless-...@njw.me.uk> wrote: > wget http://dl.suckless.org/tools/dmenu-4.4.tar.gz.sig > gpg --verify dmenu-0.4.tar.gz.sig > is not that tricky.
You've skipped over the part of how you exchange the public key, no? If it's not that tricky why doesn't Arch for example build it in to their tools? And btw gpg sucks big time. :)