[Scummvm-devel] Exchanging GPG resp. PGP keys

[Sven Hesse]

On 2011-02-14 22:52:46 +0100, Max Horn wrote:
> it would be really nice if we had a reliable "web of trust" built from cross-signed GPG keys (if you are not familiar with GPG / GnuPG or PGP, then read here: <http://en.wikipedia.org/wiki/GNU_Privacy_Guard> or here <http://en.wikipedia.org/wiki/Pretty_Good_Privacy>.

I'm all for that.

> One of the motivations for this is that GIT integrates with this, and we could mark certain releases as officially approved by signing them using a GPG key.

That would be neat indeed.

> Also, for certain internal communications (such as emailing passwords around and sensitive discussions) it would be beneficial to have encrypted and signed communication...

Yup.

> Right now, Sven / DrMcCoy and me have met in person and exchange and cross-signed our GPG keys. It would be good to extend that to more team members. You can find my key here: <http://gpg-keyserver.de/pks/lookup?search=max%40quendi.de&op=vindex>.

And in case somebody can't find my key linked from there:
<http://gpg-keyserver.de/pks/lookup?op=vindex&search=0xAE7B68F3BD2A953B>
:P

> Unfortunately, it will be rather difficult for most of us to meet in person. Still, maybe we could at least exchange GPG keys, so that if any of us runs into another, we then have everything ready to verify identities and exchange key fingerprints.

I always carry a few snippets with my fingerprint around with me.
Of course, I often forget about them... :P

> Anyway... this would also be yet another excuse for a ScummVM developer meet up. Maybe not a worldwide one, but perhaps the folks in central europe could at least meet ... ? :)

I'd really like that to happen some day, too :P


Greets
	Sven
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20110214/529990b9/attachment.sig>