[Bug 379] difficult to find the openssh code signing key on openssh.org.

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=379

papadopo at shfj.cea.fr changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WORKSFORME                  |



------- Additional Comments From papadopo at shfj.cea.fr  2003-05-02 20:15 -------
The key is in file DJM-GPG-KEY.asc but this doesn't address the poster's
question. A link is really needed to this file on the home page or the download
page. I too spent more than an hour trying to find the public key. The fact that
the file has been there for years doesn't make it easier to find. As for the
keyservers, I don't know where to find them, if I can talk to them through our
organization-wide firewall, and how to ask them for a key. I suspect this is the
case of most OpenSHH users, and is a reason why OpenSHH is probably most often
installed without checking the signature.

Again:
It would be a great service to your user community if you made the signing key  
easy to find on your web site.  A top-level link would be nice, but even a  
link from the download section would be good.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.