In-reply-to » I think I’ll give GPG, signed commits, and signed release tarballs another chance. πŸ€” Let’s see how big of a headache this is going to be …

@movq@www.uninformativ.de I think a β€œweb of trust” is important, but I’ve never been to a key signing party? Sounds too hip for me 🀣 But yeah, I dunno. πŸ€·β€β™‚οΈ Trouble I find is that the utility and wide-spread of GPG is basically bupkis πŸ˜‚

​ Read More