yes, I agree too, this provides the best overall information for users during any installation, as I suspect, not all users open up the 'Customize' options, to see whats going on. So might it be worth also notifying the user in the installers dialogue text?
Then, for those that except the key, it provides them all, with an easy way to verify future releases as well as see what a key actually looks like in the keychain. thanks rains On Aug 13, 2011, at 6:05 PM, Steve wrote: > Great solution! > > I was worried, shipping GKA with the key by default might have caused an > outcry. But this solution is nice. > > *applause* > > Steve > > Sent from my mobile - excuse my brevity > > Am 13.08.2011 um 15:28 schrieb "Alex (via GPGTools)" <[email protected]>: > >> Hi, >> >>> I like this idea, but please make it an opt-in. >> >> the question is: opt-in or opt-out? >> What about this: the next installer will always show the list of software >> components (see attached screenshot). >> >> Best regards, Alex >> >> >> On 13.08.2011, at 01:42, Moritz Ulrich wrote: >> >>> I like this idea, but please make it an opt-in. It might confuse or anger >>> people if there is suddenly a new and trusted key in their keychain. >>> (especially if they just click on 'Next' all the time without reading >>> anything) >>> We could also just open a text document which explains how to add the >>> GPGTools key and why it's a good idea to do so. >>> >>> -- >>> Moritz Ulrich >>> >>> GnuPG: 0x59B34B61 >>> >>> >>> Am Freitag, 12. August 2011 um 14:43 schrieb [email protected]: >>> >>>> That's a good idea, but I think you should provide an option to *not* do >>>> this in the installer (I would not want stuff in my GPG keychain other >>>> than things I'd explicitly put there myself, for instance). >>>> >>>> >>>> On 12 Aug 2011, at 12:41, Alex (via GPGTools) wrote: >>>> >>>>> Well, why not? We could do something like this in each installer since >>>>> the installer itself is signed and a trusted source: >>>>> >>>>> /usr/local/bin/gpg --import /tmp/GPGTools_Key/gpgtools.asc && \ >>>>> echo 85E38F69046B44C1EC9FB07B76D78F0500D026C4:6: | /usr/local/bin/gpg >>>>> --import-ownertrust >>>>> >>>>> Best regards, Alex >>>>> >>>>> >>>>> On 12.08.2011, at 09:37, rains wrote: >>>>> >>>>>> Hi All, >>>>>> >>>>>> Might it be an idea to have the GPG Keychain app come pre-installed with >>>>>> the key: 0x76D78F0500D026C4 >>>>>> >>>>>> just a thought, >>>>>> >>>>>> I can make a ticket, should it be approved, >>>>>> >>>>>> thanks >>>>>> >>>>>> rains >>>>>> >>>>>> On 11 Jan 2011, at 5:21 PM, Charly Avital wrote: >>>>>> >>>>>>> Stanley Hum wrote on 8/11/11 10:59 AM: >>>>>>>> I've download the signature file as well. I don't know how to get the >>>>>>>> public key to see if the download was signed as well. >>>>>>> >>>>>>> <http://www.gpgtools.org/about.html> please use the link: >>>>>>> Download our key: 0x76D78F0500D026C4 >>>>>>> >>>>>>> Take care, >>>>>>> Charly >>>>>>> >>>>>>> _______________________________________________ >>>>>>> gpgtools-users mailing list >>>>>>> [email protected] >>>>>>> FAQ: http://www.gpgtools.org/faq.html >>>>>>> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >>>>>>> Unsubscribe: >>>>>>> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >>>>>>> >>>>>>> This email sent to: [email protected] >>>>>> >>>>>> _______________________________________________ >>>>>> gpgtools-users mailing list >>>>>> [email protected] >>>>>> FAQ: http://www.gpgtools.org/faq.html >>>>>> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >>>>>> Unsubscribe: >>>>>> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >>>>>> >>>>>> This email sent to: [email protected] >>>>> >>>>> _______________________________________________ >>>>> gpgtools-users mailing list >>>>> [email protected] >>>>> FAQ: http://www.gpgtools.org/faq.html >>>>> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >>>>> Unsubscribe: >>>>> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >>>>> >>>>> This email sent to: [email protected] >>>> >>>> _______________________________________________ >>>> gpgtools-users mailing list >>>> [email protected] >>>> FAQ: http://www.gpgtools.org/faq.html >>>> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >>>> Unsubscribe: >>>> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >>>> >>>> This email sent to: [email protected] >>> >>> _______________________________________________ >>> gpgtools-users mailing list >>> [email protected] >>> FAQ: http://www.gpgtools.org/faq.html >>> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >>> Unsubscribe: >>> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >>> >>> This email sent to: [email protected] >> <Screen Shot 2011-08-13 at 15.24.34.png> >> _______________________________________________ >> gpgtools-users mailing list >> [email protected] >> FAQ: http://www.gpgtools.org/faq.html >> Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users >> Unsubscribe: >> http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 >> >> This email sent to: [email protected] > _______________________________________________ > gpgtools-users mailing list > [email protected] > FAQ: http://www.gpgtools.org/faq.html > Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users > Unsubscribe: > http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 > > This email sent to: [email protected] -------------------------------------------------------------- FRIENDS OF PEOPLES CLOSE TO NATURE ~ INTERCULTURAL w: fPcN interCultural: https://www.fPcN-global.org w: fPcN Germany: http://www.naturvoelker.org e: [email protected] (only secure with GPG or S/MIME) Jabber IM: [email protected] (only secure with OTR) --------------------------------------------------------------
PGP.sig
Description: This is a digitally signed message part
_______________________________________________ gpgtools-users mailing list [email protected] FAQ: http://www.gpgtools.org/faq.html Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users Unsubscribe: http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 This email sent to: [email protected]
