35468569aa
gnupg: add {andre,niibe,werner}.asc
...
Also symlink software/gnupg
Resolves : #7
2021-09-15 19:03:36 +03:00
f18c3aa305
software: add notepad++.asc
...
Resolves : #7
2021-09-15 18:49:00 +03:00
cdd74934f5
software: update onionshare.asc
...
Resolves : #10
2021-01-08 14:08:50 +02:00
14d26ebd9d
software: update gitea.asc & sign it again
...
Resolves : #9
2021-01-08 14:05:37 +02:00
f5cbdb8d38
software: add electrum-thomasv.asc
2021-01-08 13:32:28 +02:00
cc05be564b
software: update deb.torproject.org.asc
2020-11-24 08:43:37 +02:00
eef93aa680
software: add brave-stable.asc
...
already in system
2020-10-28 19:00:28 +02:00
99585a9335
add software/develkubic-obs-suse.asc
...
This key recently expired in production and as I was able to find update
for it, I am going with TOFU of that production.
2020-10-21 11:52:37 +03:00
79f4378678
software: update insync-repo.asc
2020-09-12 09:51:02 +03:00
536d54af09
software: sign docker.asc
...
Resolves : #8
2020-05-26 10:58:07 +03:00
Mikaela Suomalainen
60bb295f04
software: add docker.asc
2020-05-26 10:42:14 +03:00
4cddca7da3
software: update network-obs-suse.asc
...
expired key + expired signature
2020-03-30 18:08:51 +03:00
520922ae6e
software: add github-web-flow.asc
2020-03-21 22:46:37 +02:00
cd52c926f0
software: add weechat-deb.asc
...
Resolves : #4
2020-02-10 20:57:37 +02:00
bab6d8ae1d
software: add ring.asc
...
Resolves : #5
2020-02-10 20:56:15 +02:00
772f4bb029
software: add gitea.asc
...
Resolves : #1
> Verified 5 signatures in the past 2 months.
and https://github.com/go-gitea/gitea/issues/4374
2020-02-10 20:44:28 +02:00
7d0b920df4
software: add insync-repo.asc
...
I hope I can trust SKS keyservers and web.archive.org and Mullvad and
the connection between Mullvad and SKS, because the only information
given to me was ACCAF35C and that is trivial to collide and SKS only
gave me one key matching it.
2020-02-01 13:33:12 +02:00
66084c069b
software: add fdroid-bin.asc
...
verified from:
* https://f-droid.org/en/docs/Release_Channels_and_Signing_Keys/
* https://web.archive.org/web/20171220230937/https://f-droid.org/en/docs/Release_Channels_and_Signing_Keys/
* + checked both links with Tor Browser
I wish I had TOFU statistics for it as I have been installing the binary
with adb, but that must have been before I started using trust-model
gpg+tofu
2020-01-30 15:37:31 +02:00
2e5c496dc9
software: add mozilla-releases
...
signatures of which were hidden into their release server and the key
itself and it's fingerprints were a pain to find from their security
blog. Interestingly a lot of people had took web.arhive.org snapshots of
it or it was crawled a lot.
2020-01-29 22:03:36 +02:00
cbba4171bb
software: add veracrypt
2020-01-29 19:24:24 +02:00
c988654378
software: add keybase.asc
2020-01-28 23:18:20 +02:00
ef5bce0721
software: add network-obs-suse
2020-01-28 22:54:11 +02:00
61f0d017ee
software: add deb.torproject.org.asc
2020-01-28 22:23:12 +02:00
318677589f
software: add syncthing.asc
2020-01-28 21:29:28 +02:00
ce02abaa8e
software: add matterbridge & onionshare
2020-01-26 21:56:42 +02:00
6a231201c6
Initial commit
2020-01-24 22:27:05 +02:00