Re: Verifying and checksumming new release is somewhat cumbersom

2020-11-27 Thread john doe via Gnupg-users
On 11/26/2020 9:10 PM, Werner Koch wrote: Hi, and thanks for asking. Thanks for this. To be sure that I understand you correctly, I took the liberty of rewording your answers. On Thu, 26 Nov 2020 19:12, john doe said: Is there a URL to download those sha1sums and those public keyss as f

Changing compression configuration

2020-11-27 Thread Karmanyaah Malhotra via Gnupg-users
I'm wondering if it would be possibly to somehow use something like (pbzip2)[https://www.archlinux.org/packages/community/x86_64/pbzip2/] instead of just regular bzip2 when compressing files. I'm not sure if this would work with how GnuPG is designed, but it would be nice if compression could be mu

[cross post] Why does verification of a detached signature result in a “Message digest did not match” error for OpenPGP.js?

2020-11-27 Thread cqcallaw via Gnupg-users
Hi folks, This is an OpenPGP.js question, but I've gotten no answers from Stack Overflow, so I'm widening the cast of my net in hopes a relevant expert is lurking about. I couldn't find any community policy that such a cross post might violate, but if I missed something, please feel free to (gen

Re: Verifying and checksumming new release is somewhat cumbersom

2020-11-27 Thread Stefan Claas via Gnupg-users
On Thu, Nov 26, 2020 at 9:18 PM Werner Koch via Gnupg-users wrote: > > Hi, > > and thanks for asking. > > On Thu, 26 Nov 2020 19:12, john doe said: > > > Is there a URL to download those sha1sums and those public keyss as files? > > The problem with sha1sums is that a single publication would be