GNU bug report logs - #25572
Signatures on Emacs windows .zip files

Previous Next

Full log

Message #14 received at 25572 <at> debbugs.gnu.org (full text, mbox):

From: "Phillip Lord" <phillip.lord <at> russet.org.uk>
To: "Eli Zaretskii" <eliz <at> gnu.org>
Cc: Richard Kettlewell <rjk <at> terraraq.uk>, 25572 <at> debbugs.gnu.org
Subject: Re: bug#25572: Signatures on Emacs windows .zip files
Date: Sun, 29 Jan 2017 21:14:46 -0000

On Sun, January 29, 2017 8:14 pm, Eli Zaretskii wrote:
>> From: Richard Kettlewell <rjk <at> terraraq.uk>
>> Date: Sun, 29 Jan 2017 11:48:55 +0000
>>
>>
>> $ gpg2 --verify emacs-25.1-2-x86_64-w64-mingw32.zip.sig
>> gpg: Signature made 11/29/16 19:54:09 GMT Standard Time using DSA key ID
>>  60C3B396
>> gpg: Good signature from "Phillip Lord <phillip.lord <at> russet.org.uk>"
>> gpg:                 aka "Phillip Lord <p.lord <at> russet.org.uk>"
>> gpg:                 aka "Phillip Lord <p.lord <at> hgmp.mrc.ac.uk>"
>> gpg:                 aka "Phillip Lord <phillip.lord <at> newcastle.ac.uk>"
>> gpg: WARNING: This key is not certified with a trusted signature!
>> gpg:          There is no indication that the signature belongs to the
>> owner. Primary key fingerprint: 8352 2404 7598 ECBC 61A1  DA34 5FE9 658D
>> 60C3 B396
>>
>
> That's because the zip files with Windows binaries were produced by
> Phillip.
>
>
> Why is that a bug?
>

I think it's a flaw with the website. It needs both our keys on.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.