From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id D38B140E70 for ; Tue, 9 Aug 2022 17:50:25 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 999D168B7E6; Tue, 9 Aug 2022 20:50:21 +0300 (EEST) Received: from w4.tutanota.de (w4.tutanota.de [81.3.6.165]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 6F84168B5C5 for ; Tue, 9 Aug 2022 20:50:14 +0300 (EEST) Received: from w3.tutanota.de (unknown [192.168.1.164]) by w4.tutanota.de (Postfix) with ESMTP id B1BE4106015F for ; Tue, 9 Aug 2022 17:50:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1660067413; s=s1; d=lynne.ee; h=From:From:To:To:Subject:Subject:Content-Description:Content-ID:Content-Type:Content-Type:Content-Transfer-Encoding:Content-Transfer-Encoding:Cc:Date:Date:In-Reply-To:In-Reply-To:MIME-Version:MIME-Version:Message-ID:Message-ID:Reply-To:References:References:Sender; bh=F+eG2OwUslKnckTz004+vtXfMXgAcV/2zDFuiAsQ6CM=; b=qOtoM3HlB+pygot/uRlvkfl3XT7+u2Svami3CfR5ySkrrp9qe5LPX8M9gPC+hGst wK0QKATO+eWU+rQAndRySX+ZN5KKngkYVTm43B0Q8PUXxHFyUeuI4sZLmp4Uh0+3B1F upw4W/m5uEQ4+d2/6zxeeKH1uuxVt3s38f9+JegzleLuiCfWZ1XQgSME1OjKBCqOmND ZLEsivMtNj1D7V8vjKDCJP+24rq+qHh5fkhzo+qoTShksBFfeh4mnxaRRD9Qa7SHbe4 rhZbQ5I9hDPRnQ6X2Dvha2FTMd7Dniq8KvTrkn7nQfMrScLp/+1QOggn2PJx4PLnqgU wkkey614WQ== Date: Tue, 9 Aug 2022 19:50:13 +0200 (CEST) From: Lynne To: FFmpeg development discussions and patches Message-ID: In-Reply-To: <20220809110235.GZ2088045@pb2> References: <20220808145008.26162-1-michael@niedermayer.cc> <20220808145008.26162-1-michael@niedermayer.cc-N8xvyjN----2> <20220808223653.GX2088045@pb2> <20220809105952.GY2088045@pb2> <20220809110235.GZ2088045@pb2> MIME-Version: 1.0 Subject: Re: [FFmpeg-devel] [RFC] git and signing commits and tags X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: Aug 9, 2022, 13:02 by michael@niedermayer.cc: > On Tue, Aug 09, 2022 at 12:59:52PM +0200, Michael Niedermayer wrote: > >> On Tue, Aug 09, 2022 at 12:36:53AM +0200, Michael Niedermayer wrote: >> > On Mon, Aug 08, 2022 at 09:26:52PM +0200, Lynne wrote: >> > > Aug 8, 2022, 16:50 by michael@niedermayer.cc: >> > > >> > > > Given the recent server issues, i wonder if we should suggest/recommand >> > > > and document signing commits and tags >> > > > >> > > > i tried to push such commit to github and it nicely says "verified" >> > > > https://github.com/michaelni/FFmpeg/commit/75f196acd16fb0c0ca7a94f0c66072e7c6f736bf >> > > > >> > > > Ive generated a new gpg key for this experiment as i dont have my >> > > > main key on the box used for git development and also using more >> > > > modern eliptic curve stuff (smaller keys & sigs) >> > > > i will upload this key to the keyservers in case it becomes the >> > > > one i use for git. >> > > > >> > > >> > > I sign all of my commits, >> > >> > I didnt notice, but thats good as it also proofs it works with no ill >> > sideeffects >> > >> > Where can i find your public key ? it seems its not on the keyservers i checked >> >> Your key seems only on openpgp.org but that strips userids unless the owner approves it >> (i presume for GDPR) making the key not work >> >> gpg --keyserver hkps://keys.openpgp.org --recv-keys FE50139C680572CAFD521F8DA2FEA5F03F034464 >> gpg: key A2FEA5F03F034464: no user ID >> gpg: Total number processed: 1 >> >> gpg --list-keys FE50139C680572CAFD521F8DA2FEA5F03F034464 >> gpg: error reading key: No public key >> >> gpg --recv-keys FE50139C680572CAFD521F8DA2FEA5F03F034464 >> gpg: keyserver receive failed: No data >> > > found your key with google here: > https://lynne.ee/extra/A2FEA5F03F034464.asc > I just pushed it to keyserver.ubuntu.com, the only still working server I found, surprisingly. Seems a few months ago sks (a protocol/sever? to share keys between servers) was deprecated and most servers went down, and the GDPR also took some out. Sad. There's some work done to make a new protocol/server apparently. I'm very sure I pushed my key to the MIT server back when I made it in 2019, but that server also seems like it's forgotten my key and not accepting it. I once imported all maintainer keys listed in MAINTAINERS and found many were revoked (I think compn's), while some used triple DES. The oldest key I found for a maintainer is actually Nicolas George's key, a triple DES from 2001! Maybe we should clean up the list of keys. _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".