Re: Verifying and checksumming new release is somewhat cumbersom

2020-11-27 Thread Stefan Claas via Gnupg-users
On Thu, Nov 26, 2020 at 9:18 PM Werner Koch via Gnupg-users wrote: > > Hi, > > and thanks for asking. > > On Thu, 26 Nov 2020 19:12, john doe said: > > > Is there a URL to download those sha1sums and those public keyss as files? > > The problem with sha1sums is that a single publication would be

[cross post] Why does verification of a detached signature result in a “Message digest did not match” error for OpenPGP.js?

2020-11-27 Thread cqcallaw via Gnupg-users
Hi folks, This is an OpenPGP.js question, but I've gotten no answers from Stack Overflow, so I'm widening the cast of my net in hopes a relevant expert is lurking about. I couldn't find any community policy that such a cross post might violate, but if I missed something, please feel free to (gen

Changing compression configuration

2020-11-27 Thread Karmanyaah Malhotra via Gnupg-users
I'm wondering if it would be possibly to somehow use something like (pbzip2)[https://www.archlinux.org/packages/community/x86_64/pbzip2/] instead of just regular bzip2 when compressing files. I'm not sure if this would work with how GnuPG is designed, but it would be nice if compression could be mu

Re: Verifying and checksumming new release is somewhat cumbersom

2020-11-27 Thread john doe via Gnupg-users
On 11/26/2020 9:10 PM, Werner Koch wrote: Hi, and thanks for asking. Thanks for this. To be sure that I understand you correctly, I took the liberty of rewording your answers. On Thu, 26 Nov 2020 19:12, john doe said: Is there a URL to download those sha1sums and those public keyss as f