X-Original-To: alpine-devel@lists.alpinelinux.org Received: from anomx-md.ovpn.to (anomx.ovpn.to [178.17.171.134]) by lists.alpinelinux.org (Postfix) with ESMTP id 8A35BF8162D for ; Sat, 2 Feb 2019 04:08:34 +0000 (UTC) Received: from anomx.ovpn.to (unknown [IPv6:fd48:8bea:68a5:aaaa::aa01]) by anomx-md.ovpn.to (Postfix) with ESMTPS id 1A9D61DDB3 for ; Sat, 2 Feb 2019 03:40:12 +0000 (UTC) Received: from localhost (anomx.ovpn.to [127.0.0.1]) by anomx.ovpn.to (Postfix) with ESMTP id 13F64C1A14 for ; Sat, 2 Feb 2019 05:08:33 +0100 (CET) X-Spam-Flag: NO X-Spam-Score: 4.525 Received: from anomx.ovpn.to ([127.0.0.1]) by localhost (anomx.ovpn.to [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UUvBQ05dso2E for ; Sat, 2 Feb 2019 05:08:27 +0100 (CET) To: alpine-devel@lists.alpinelinux.org From: Tyler Openpgp: preference=signencrypt Autocrypt: addr=tylera@privatedemail.net; keydata= mQINBFtgAqYBEAC1NIkm0+2XXX+dw+ENuQGYFqpwMX8UNsbCbLXV6xhC4xyjsGu0CGJbAJqi +2/W3sn/rphF1Uxu7MraXxseMoHPQ7wJnE/t+YzZxNOFMbR/9FtYS16ixJEbrgj658H4y+hq RspdRxxZif0C28FASY7zWjUsRpZjk4mG8e7wu+2X3LSlmh8MnBh38gPD65DROiQGLc3SDA4q H1jBSZw59HMo+fC3sy2kZsSFJGTaXG0HKRdYa0mDbTd54kCfDkO+8bkgBntsYvzjzQ2k2+88 Iq1GwAcTI/7t5leBpLuMiCCKBVu122StldM6zSXmKh7IX9fIKLqSQaM62rZ6+baXRLQLQAIz eMFSE27RriZqR1z3xO9msPA90taVPnAbspqmkQoIjZCnSxywMLR0ALdoN/QHwxVgUEFLKdfR YPvodP5+L+geqRlaePb/7cTCY2C6DRUA/goaVbUExIVXWyJmiuuvjn227cuLBEpdpXLGqjOO qg7+qQXxVjLAFd0i1QRp3yQjA3nlK6kk8WUXTHBWdrbnK6YIpuyuvVDpNYc1/sIZCIqZP7i5 Sm0Gkypgt902Xw2ix6Fvbl2X6wtQ310/HcPxS3h3r3iQKgrMetEN/ZERqxsfKIhbvH+kcENT ISh3MAlgGgqMwDKM+enMrDAz4p/wady6DFhK6FhC9lb1Jsd7AwARAQABtCJUeWxlciBBIDx0 eWxlcmFAcHJpdmF0ZWRlbWFpbC5uZXQ+iQJUBBMBCAA+FiEER9JjwlDS+uHfCpUInJlU+I44 iFkFAltgAqYCGwMFCQlmAYAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQnJlU+I44iFl0 2Q/+IWDZb8w/peEf/SlmxI/E0jnTPO+hNPhVJKwTFbkiTVjISydKO9LF0drBLuLILXWqUU3b QWBD9bCoMmS7mNBMDdlABsyBguyB1p2PLdDQ2w3jXkWPKYbYp6L/yTovfn9jO0XqRzrjh18w bph52rX0CoaO16K2bPIG4m5qF8qjAqZVx4fieA0R4YzyhWxEujr1eGHTXfyfTnDAKgyTeE5n kjPXMBu301Xiii6vEsA7oZYmqGeg2MM+AQR3uzLS+ULfth1pz7T6wRETMrmxIj+ehNUFfo4r e5AMc7Hjj0WG4skTHuACsVPqjcfztgVsnY6rHz64haAu1mnKta6LTcd4WFfJ3CIACBp0wTj4 vokB0aqkp4+cjbOUt9H5AqvIgwIajpjOyFh4+FRJcAnfj7VQnuUKqMdqr+aMaOIO5h1nPW16 6FTjTatDsLIAKG5AlmdcmFNCZYNKnVoTGMBPICN4viiN/T1/4Es/crgRUA/w3uaAHVu1HVSO k+V9uTuJFBvEll2636zZCnFWEmf3dQJEiX00gxBUAQ8y7Fakw7fF70x3BzMUZsLqX7zUx+NW kRAsDxmTscZyq+2uP6L/3FsOjQYx8/0SafOqQNJPgGlZyivLk7UdI6x8XuUE8UkeGhdFcP1b EAP/SaUlM3r1p0DjyyEujjubPWq9Rz9OSBO2XjW5Ag0EW2ACpgEQANtJHr30XpKj2WmJlvOb R+ACFLcvb++HcjIV96w4tsaC7jh1UhZbKPrkox7E6S/wuvRa/z21r9DaKTL6+DXIIuxL2+sg 27tI3w35mGgnfKwYchLGZXU4o+za1A5e/IzHlrY6TJQekCVE/L/awLUwSd6EwUY0b1zZuzRQ LH87RnvS+1UbdjR3t70x7UYIdRfTMBgm5QIglIdDYdDD7rbUyJv0E8xXCcw5LE7FTgBZ7wOz mXyxj3sjB4j2SKhswEz06fKlRePoQyn6Zr9OYgaFmTU8sF7Lucs1oTplbp4Yd4LDObJTtD3p tYGDZScq4B2m7+bDw+JEhW1pKyNMeJxnGLmgH39bafZgKI6OMCQf4wVkXgOv2AtI4HXSGrpr yLnPps3Hv/kjzmA4HuebSc+oCbJD43UzTfywJvCi3mG8qIecMpw/X8WwH4/tTRQY/ysmnPKa boIlMR75fXwjtp/OJqMNlvn+jbcAqATMQ/t7np6nebQfEmRqxOvVTjf5z0SKT0uJl5IsDE+B Plhu/+DnsxsQnFfDiwV5+vsF2yKqBrmF6sLfrIMH3uvknU2jOBA0k0SvKcBtheFAkl9m2max VIxzuf5iBsAwoVVZJHo4KF9bEgT+r4bA6IveBqsg6RZoi3GVERxWFguTer/2u+iEZouuuCVm OMltNAjoOynw0ldFABEBAAGJAjwEGAEIACYWIQRH0mPCUNL64d8KlQicmVT4jjiIWQUCW2AC pgIbDAUJCWYBgAAKCRCcmVT4jjiIWX9lD/40cqB4M9sOmJDKmUFuCsI0EFWtdiud/U3qq1Cd 0ydr2yZoj3MYu/UdJKX2d/cVvJxiMrPBQ1EYMh6CFdjom50Eq828eDwuSWpfD9+hXEtfhOeo fM0h0DreBkp+TN5RqmaGjYWDNb/6bcQ52chYbiODmv7UgzFCexONiVrOZ14YEMNdWdPkx8tT kBqigl93lcJM4K8xvyLftlk0oVyAB4/KDH84blcRyGOxG87ppcGESL5wKPLf5UMUp9TWpvPY fFVIfgz1a7ls2uX8tHK3BBTK38AstfnLjtpsg7P2U3uhyti+jP0DF05NM0v5JjoxyMyG93xy jRENRuQP4H/C1ctxPY8y2mOA210ZWBd+fVYL+/JImXap9N2fssSVyPKUh8Qtdub1WZq48PGa 1klZmQpAWUsrvG1x3J5veS6mZzZHFXO0CvtRhk+u5CcQB/1a7lMu/TYuc05vGeq6GOlAA93+ HtVNjIKnwj3KyV6OFaee5z13VB7i+4plKG0yllvXdajjU2uE8+Kip+FnAHm7Aobs0hWhB674 3242TGeoJ1Hj1ALCMI/Ao1lov9wgndJ4pH2IDuPKp0DiFtSuUFNtaItGMSsOkY3k8wRIs7Lj uG6KTFAhArRIfp8qIobs80E/PoKaZVTDvL+5i1bejpqZgtANEXaaVGz2WjdkNr24eYExlg== Subject: [alpine-devel] Missing .asc pgp signatures for Alpine Linux 3.9.0 images? Message-ID: <0ed8aaeb-e350-6ba3-50f9-8fcb4f804551@privatedemail.net> Date: Sat, 2 Feb 2019 14:38:12 +1030 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="wPwsz4O75BO7SInGxvF004fr7xKMnllwz" X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --wPwsz4O75BO7SInGxvF004fr7xKMnllwz Content-Type: multipart/mixed; boundary="us1C5NoMazaWbPQyKPZ6OqWyyg6Vg0JMD"; protected-headers="v1" From: Tyler To: alpine-devel@lists.alpinelinux.org Message-ID: <0ed8aaeb-e350-6ba3-50f9-8fcb4f804551@privatedemail.net> Subject: Missing .asc pgp signatures for Alpine Linux 3.9.0 images? --us1C5NoMazaWbPQyKPZ6OqWyyg6Vg0JMD Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hi I'm curious to know why when I went to the download page https://alpinelinux.org/downloads/ none of the gpg signatures for any of the isos/images were availible. I was getting 404 for all of them. Alpine Linux 3.9.0 was released 3 days ago. There were .asc files or RC1, but it seems RC2 to RC5 and now the final release did not get any. Can you please explain why this is the case? An unsigned SHA256sum and SHA512sum isn't really all that useful for verifying authenticity. Additionally I checked the mirror to see if there was a checksum for all the images that was signed (like Debian does) but it seems that's not the case either. --=20 Tyler (tya99) rsa4096/0x9C9954F88E388859 --us1C5NoMazaWbPQyKPZ6OqWyyg6Vg0JMD-- --wPwsz4O75BO7SInGxvF004fr7xKMnllwz Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEER9JjwlDS+uHfCpUInJlU+I44iFkFAlxVF7FfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ3 RDI2M0MyNTBEMkZBRTFERjBBOTUwODlDOTk1NEY4OEUzODg4NTkACgkQnJlU+I44 iFkHZxAAmQ3M4PA42EccI9czDiJ4YAYxbpkXkor3OrvWGtNwjy1sl9VvJys+4HrC pINeLxEIINXK+Bt+NdLrrnsnnYYPpkK/EDwJee51qyIB4fenz9peORAmd+la7hvZ 4WV+MnQ4P7CWkXE1pr61DomXDa7ewjX4BBtJ0uqz2vL/G+Xuc5DeOwLD5eBPgHgI hDKOGatCfFRxm8iWlarwQZRoKpRhzEHvJ//4NUp0mD0eMfZfBAhBDtDjhfUOMeNv RQ08scNLS95rh1TzBnLewVleWdlQAlW32DSp8VoONmIXDrAJFrmDDxNexkPEAJwK bZHOCP1xtPxcRpQYQihT+Kwu07mMzd4IjAYv8kEptCgxRhVZjX9Dpv3733PwICWB nU+WUkHnBfHZfq3CfIRvK9fOMphZRaVGhBLmaXDusptTSDxZdZ7cva8jyB1+KzBZ 2nSXdpOzwZaef+eW4588oiZFJdC1dxdSTQ7WZkFC5jg+nZuWdrQ2ti4LZw86A3Sz NJ9CfIpxTF+YZsY+N/L0qyGC+6puJOt6YhYaLaFWyCrkEJHTSJ2DRe0/7eQLckwm l9X+bHPb3/t0udxYV4pEUNc1mktpNANd/tT4RtShd9Du3ler9BgK7QG0AkfZC1ed Dzx5Ifb0KgTsyyDJfQVlj4w5cxTFtVgEHattdbOXKSElcEvUsKI= =TOg2 -----END PGP SIGNATURE----- --wPwsz4O75BO7SInGxvF004fr7xKMnllwz-- --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---