[Gta04-owner] [Tinkerphones] Towards QtMoko2: building QtMoko from sources

Roland Häder roland at mxchange.org
Sat Jun 3 22:12:23 CEST 2017


Do not bypass secrurity! Better is to get it properly signed. You should
then provide the GPG public key (obviously) on your website so people
can use it for verification the apt-key-common way:

gpg --keyserver pgpkeys.mit.edu --recv-key  xxxxxx
gpg -a --export xxxxxx | sudo apt-key add -

by xxxxxx is the long key id (don't encourage, short keys, they are
flawed as malicous people can theoretical craft a pgp key that has the
same (!) short key, like it already happened with Linus Torwalds' key.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.goldelico.com/pipermail/gta04-owner/attachments/20170603/d6eed2d4/attachment.asc>


More information about the Gta04-owner mailing list