📅 Original date posted:2021-10-20
📝 Original message:On Wednesday, October 20th, 2021 at 3:20 PM, Owen Gunden via bitcoin-dev <bitcoin-dev at lists.linuxfoundation.org> wrote:
> I also notice that, as of 22.0, Wladimir is no longer signing the
> releases, and I have no trust in my gpg network of the people who seem
> to have replaced him.
This is not correct. Here are Wladimir's attestations on the 22.0 release: https://github.com/bitcoin-core/guix.sigs/tree/main/22.0/laanwj
There is no separate special release key anymore though. Instead, the build attestations (by anyone) can be used as your trust basis.
> Given the level of security at stake here, my eyebrows are raised at
> this combination of items changing (new website + new gpg signers at the
> same time).
There is no new website. The Bitcoin Core project website has been https://bitcoincore.org for years. I don't know why https://bitcoin.org hasn't updated to list the 22.0 release, though; that's up to them.
Cheers,
--
Pieter
Pieter Wuille [ARCHIVE] /
npub1tj…jtl6r
2023-06-07 23:00:15
in reply to nevent1q…d4ja
Author Public Key
npub1tjephawh7fdf6358jufuh5eyxwauzrjqa7qn50pglee4tayc2ntqcjtl6rPublished at
2023-06-07 23:00:15Event JSON
{
"id": "60c31a5dfed835c09ba6bbf6ea01220d06ef59dc33f307a04b9ebba16b8909e6",
"pubkey": "5cb21bf5d7f25a9d46879713cbd32433bbc10e40ef813a3c28fe7355f49854d6",
"created_at": 1686178815,
"kind": 1,
"tags": [
[
"e",
"a514e5c68bef61bec41f615418aa8b3401773f97dcaf1a33b9d69757609c0a79",
"",
"root"
],
[
"e",
"4e71ac3cbb4116e85a08f2481eb4999026ff661c9645e429692f875779e13b5b",
"",
"reply"
],
[
"p",
"8be4d6a7fffe0afa37fb93c368165a4b57f6973c7841f2a367d34cb879d71b0c"
]
],
"content": "📅 Original date posted:2021-10-20\n📝 Original message:On Wednesday, October 20th, 2021 at 3:20 PM, Owen Gunden via bitcoin-dev \u003cbitcoin-dev at lists.linuxfoundation.org\u003e wrote:\n\n\u003e I also notice that, as of 22.0, Wladimir is no longer signing the\n\u003e releases, and I have no trust in my gpg network of the people who seem\n\u003e to have replaced him.\n\nThis is not correct. Here are Wladimir's attestations on the 22.0 release: https://github.com/bitcoin-core/guix.sigs/tree/main/22.0/laanwj\n\nThere is no separate special release key anymore though. Instead, the build attestations (by anyone) can be used as your trust basis.\n\n\u003e Given the level of security at stake here, my eyebrows are raised at\n\u003e this combination of items changing (new website + new gpg signers at the\n\u003e same time).\n\nThere is no new website. The Bitcoin Core project website has been https://bitcoincore.org for years. I don't know why https://bitcoin.org hasn't updated to list the 22.0 release, though; that's up to them.\n\nCheers,\n\n--\nPieter",
"sig": "cc6de47b3834b06ba17c0e70191288adc588bdb02d58a8e50f7a19a1dfc5a9772ddb28dc6ce8bef0ee5d8ec6967decce00a537d8bf911b2345ac583a59a09c1e"
}