[Alpine-info] How do I use gpg to verify alpine-2.26.zip?

NM Public via Alpine-info alpine-info at u.washington.edu
Thu Apr 11 13:44:50 PDT 2024


Thank you Eduardo! I'm glad I was able to verify this download. I try to
be security conscious, especially after the recent xz backdoor
<https://en.wikipedia.org/wiki/XZ_Utils_backdoor> 😱

Good to be back in touch!
Nancy

On Thu, 11 Apr 2024, Eduardo Chappa via Alpine-info wrote:


> Hello Nancy,

>

> thank you for trying version 2.26. I do not normally post gpg signatures

> for windows binaries. This has to do with moving files between computers

> which leads to losing information (keys) and me not using gpg on a daily

> basis (so I am happy to regenerate keys as much as I need, when I need). I've

> been good about this in the last few years, so all is good at this time.

>

> I posted a signature for the windows binary at

>

> https://alpineapp.email/alpine/release/src/sig/windows-2.26.zip.sig

>

> I hope this helps you with your endeavors.



More information about the Alpine-info mailing list