[tor-talk] suggestion/fix for the signing keys

r00mmaf at secmail.pro r00mmaf at secmail.pro
Wed Jul 10 12:19:52 UTC 2019


The signing keys are listed on
https://2019.www.torproject.org/docs/signing-keys.html.en but the keys
themselves are hosted on the MIT keyserver. However they've been
notoriously unreliable for me in the past - time outs and proxy errors,
with and without TOR browser. During the last 3 days I tried over a dozen
times to get one of the keys again, even with changing identities multiple
times it never worked.

Could the Tor team please, please provide a more reliable method to
retrieve their keys? Too few people already use the PGP keys for
verifying, let's not scare off the ones that actually want to.
See also https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f



More information about the tor-talk mailing list