Hence "You should download multiple developers' public keys from at least two independent sources each and ensure they match. Ideally, you should verify key fingerprints in person with the developer(s) to the best of your ability."😉
Catch me at a Bitcoin conference sometime - I carry around business cards with my PGP key fingerprint.
In the past, Core devs have had key signing meetings, but I had to make a new key after the last one
Luke Dashjr
npub1lh…aa9nk
2024-08-04 11:26:38
in reply to nevent1q…7h42
Author Public Key
npub1lh273a4wpkup00stw8dzqjvvrqrfdrv2v3v4t8pynuezlfe5vjnsnaa9nkPublished at
2024-08-04 11:26:38Event JSON
{
"id": "6de7f714225ea60b7b06666de35f3b5a544898980c648e6bd09faeeba69dcb68",
"pubkey": "fdd5e8f6ae0db817be0b71da20498c1806968d8a6459559c249f322fa73464a7",
"created_at": 1722770798,
"kind": 1,
"tags": [
[
"e",
"71d495c267c3f036d0449f990509b8067c9e82fe14795a75ecef74fb78c2fb9f",
"",
"root"
],
[
"e",
"766b026449e4eeeb98a251bd613b544f06bd4b548d97eb04ebded3cd823a5a13",
"",
"reply"
],
[
"p",
"fdd5e8f6ae0db817be0b71da20498c1806968d8a6459559c249f322fa73464a7"
],
[
"p",
"c027a5c368d76620072b15ba36b8502a5477fc4f316163e7ff7c95046df9f109"
]
],
"content": "Hence \"You should download multiple developers' public keys from at least two independent sources each and ensure they match. Ideally, you should verify key fingerprints in person with the developer(s) to the best of your ability.\"😉 \n\nCatch me at a Bitcoin conference sometime - I carry around business cards with my PGP key fingerprint. \n\nIn the past, Core devs have had key signing meetings, but I had to make a new key after the last one",
"sig": "c8bff5f49931c9fc5e6a225b8ed72d90ae5ef9b845a270381ab62e79af6e02be0ac3a67cb50daf54838499c3f7295f21e0ca52655d11df071144c25425a5c8fc"
}