Skip to content

Commit

Permalink
doc: additional note in README(.md) informing users that it is advise…
Browse files Browse the repository at this point in the history 
…d to import the full set of trusted release keys (rather than an individual key)

Additional README.md update

Fixes: nodejs#32559
  • Loading branch information
@haqer1
haqer1 committed Apr 4, 2020
1 parent 67d5c90 commit 9bd6618
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -565,7 +565,9 @@ GPG keys used to sign Node.js releases:
* **Shelley Vohr** <shelley.vohr@gmail.com>
`B9E2F5981AA6E0CD28160D9FF13993A75599653C`

To import the full set of trusted release keys:
To avoid nuances involved in verification of a sub-key possibly used to sign a
release, it is advised to import the full set of trusted release keys (rather
than an individual key used to sign a release):

```shell
gpg --keyserver pool.sks-keyservers.net --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
Expand Down

0 comments on commit 9bd6618

Please sign in to comment.