Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-24 Thread Roberto Resoli
Il 20/03/25 17:16, Christopher Schultz ha scritto: Roberto, On 3/20/25 7:52 AM, Roberto Resoli wrote: Il 19/03/25 20:48, Mark Thomas ha scritto: On 19/03/2025 18:51, Mark Thomas wrote: ... So the signing fingerprint may not be the same of that of the principal key as metioned in the KEYS f

Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-20 Thread Christopher Schultz
Roberto, On 3/20/25 7:52 AM, Roberto Resoli wrote: Il 19/03/25 20:48, Mark Thomas ha scritto: On 19/03/2025 18:51, Mark Thomas wrote: ... I did receive a request to verify my key from a key server (I forget which) a few weeks ago which I ignored since I hadn't recently uploaded any keys.

Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-20 Thread Roberto Resoli
Il 19/03/25 20:48, Mark Thomas ha scritto: On 19/03/2025 18:51, Mark Thomas wrote: ... I did receive a request to verify my key from a key server (I forget which) a few weeks ago which I ignored since I hadn't recently uploaded any keys. OK. This is a *very* old key that I haven't used

Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-19 Thread Mark Thomas
On 19/03/2025 18:51, Mark Thomas wrote: On 19/03/2025 14:52, Roberto Resoli wrote: Hello, I am trying to verify GPG signatures of recent tomcat downloads, but I noted that both Mark E D Thomas DCFD35E0BF8CA7344752DE8B6FB21E8933C60243 Remy Maucherat 48F8E69F6390C9F25CFEDCD268248959359E72

Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-19 Thread Mark Thomas
On 19/03/2025 14:52, Roberto Resoli wrote: Hello, I am trying to verify GPG signatures of recent tomcat downloads, but I noted that both Mark E D Thomas DCFD35E0BF8CA7344752DE8B6FB21E8933C60243 Remy Maucherat 48F8E69F6390C9F25CFEDCD268248959359E722B Are no more available on the https://ke

Re: Verifying Tomcat downloads

2023-11-03 Thread Christopher Schultz
James, Mark, On 11/3/23 12:33, Mark Thomas wrote: On 03/11/2023 15:45, James H. H. Lampert wrote: Forgive me if this might be a bit off-topic. But I haven't found a lot of resources on the subject (and that includes a search of List archives). For years now, I've been ignoring the note on th

Re: Verifying Tomcat downloads

2023-11-03 Thread James H. H. Lampert
On 11/3/23 9:33 AM, Mark Thomas wrote: Alternatively, come along to the next Community Over Code conference, take part in the key signing party and join the web of trust (or just use this as the excuse to come to the conference). And as a final option (I've done it once in 20 years) you can a

Re: Verifying Tomcat downloads

2023-11-03 Thread Mark Thomas
On 03/11/2023 15:45, James H. H. Lampert wrote: Forgive me if this might be a bit off-topic. But I haven't found a lot of resources on the subject (and that includes a search of List archives). For years now, I've been ignoring the note on the Tomcat download pages to verify the downloads, pre