From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#25572: Signatures on Emacs windows .zip files Date: Sun, 29 Jan 2017 22:14:08 +0200 Message-ID: <83d1f5y67j.fsf@gnu.org> References: <92b7e28f-8e37-21f4-ca46-0d4ca9429c4a@terraraq.uk> Reply-To: Eli Zaretskii NNTP-Posting-Host: blaine.gmane.org X-Trace: blaine.gmane.org 1485720915 8175 195.159.176.226 (29 Jan 2017 20:15:15 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sun, 29 Jan 2017 20:15:15 +0000 (UTC) Cc: 25572@debbugs.gnu.org To: Richard Kettlewell Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Jan 29 21:15:09 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cXvsQ-0001nj-4o for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Jan 2017 21:15:06 +0100 Original-Received: from localhost ([::1]:56592 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cXvsV-0000fQ-Jy for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Jan 2017 15:15:11 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:40817) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cXvsP-0000dt-UM for bug-gnu-emacs@gnu.org; Sun, 29 Jan 2017 15:15:06 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cXvsM-0003lJ-PW for bug-gnu-emacs@gnu.org; Sun, 29 Jan 2017 15:15:05 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:52235) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cXvsM-0003lF-Lp for bug-gnu-emacs@gnu.org; Sun, 29 Jan 2017 15:15:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cXvsM-0006U7-Ec for bug-gnu-emacs@gnu.org; Sun, 29 Jan 2017 15:15:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 29 Jan 2017 20:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 25572 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 25572-submit@debbugs.gnu.org id=B25572.148572087324878 (code B ref 25572); Sun, 29 Jan 2017 20:15:02 +0000 Original-Received: (at 25572) by debbugs.gnu.org; 29 Jan 2017 20:14:33 +0000 Original-Received: from localhost ([127.0.0.1]:50434 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cXvrp-0006T7-E3 for submit@debbugs.gnu.org; Sun, 29 Jan 2017 15:14:33 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:49596) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cXvrn-0006Sv-Pg for 25572@debbugs.gnu.org; Sun, 29 Jan 2017 15:14:28 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cXvrd-0003cT-Ex for 25572@debbugs.gnu.org; Sun, 29 Jan 2017 15:14:22 -0500 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:49941) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cXvrd-0003cN-Bq; Sun, 29 Jan 2017 15:14:17 -0500 Original-Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3461 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1cXvrc-0007VO-42; Sun, 29 Jan 2017 15:14:17 -0500 In-reply-to: <92b7e28f-8e37-21f4-ca46-0d4ca9429c4a@terraraq.uk> (message from Richard Kettlewell on Sun, 29 Jan 2017 11:48:55 +0000) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:128766 Archived-At: > From: Richard Kettlewell > Date: Sun, 29 Jan 2017 11:48:55 +0000 > > According to https://www.gnu.org/software/emacs/download.html: > > Since the 24.5 release, tarballs are signed with the GPG key from > Nicolas Petton 7C207910, fingerprint 28D3 BED8 51FD F3AB 57FE > F93C 2335 87A4 7C20 7910, which can be found in the GNU keyring. > > However the windows .zip files on http://ftp.gnu.org/gnu/emacs are > signed with some other key: > > $ gpg2 --verify emacs-25.1-2-x86_64-w64-mingw32.zip.sig > gpg: Signature made 11/29/16 19:54:09 GMT Standard Time using DSA key ID > 60C3B396 > gpg: Good signature from "Phillip Lord " > gpg: aka "Phillip Lord " > gpg: aka "Phillip Lord " > gpg: aka "Phillip Lord " > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the > owner. > Primary key fingerprint: 8352 2404 7598 ECBC 61A1 DA34 5FE9 658D 60C3 B396 That's because the zip files with Windows binaries were produced by Phillip. Why is that a bug?