Wiktor @wiktor@mastodon.social

Is there a good reference Android application that builds reproducibly, uses Gradle and is signed by developer's key on F-Droid? (using Binaries meta-data, appears here: https://verification.f-droid.org as verified etc.).

https://f-droid.org/en/docs/Reproducible_Builds/ sadly lacks examples... :(

#fdroid #foss

@sheogorath By the way I just found your message on GnuPG ML (https://lists.gnupg.org/pipermail/gnupg-users/2019-February/061563.html). All clients will follow redirects, GnuPG has some restrictions (like it won't follow if the host and path change at the same time) but they should be just edge cases, the most common (e.g. appending "www" subdomain) will work, e.g. kernel uses this redirect scheme: https://www.kernel.org/category/signatures.html#using-the-web-key-directory

@paul What are your thoughts on https://github.com/firstlookmedia/gpgsync ?

When I read about the key list concept on https://www.fluidkeys.com/weeknotes/week-26/ I immediately thought about GpgSync :)

It would be nice if there was one format used by many tools instead of many small tool-specific formats... I think...

@mrb By the way... I think something's not exactly right here: https://mrblog.nl/about/ :)

Nice to see you here @paul !

By the way you can verify your personal domain with a simple rel=me link: https://github.com/tootsuite/mastodon/pull/8703 😉

@Valodim FYI Interesting take on Linked Identities on "the Fediverse": https://www.zylstra.org/blog/2018/10/mastodon-rel-me/

@opensuse openSUSE, you can add more credibility to your profile by adding `rel=me` link on opensuse.org linking to this Mastodon account (<a rel="me" href="https://fosstodon.org/@opensuse">...</a>). The link on Mastodon profile will become "verified" (see https://github.com/tootsuite/mastodon/pull/8703).

Nice to see you here and have a nice day! :)

@Gargron FYI Your GPG key expired (on https://zeonfederated.com), I sent you an e-mail some time ago about it but maybe it went to spam or something...

@usul A minor thing but if you add `<a rel=me..>` link to your Weblog mentioning your Mastodon account Weblog link will show as Verified here in Mastodon. There is a page describing it (/settings/profile).

@stevenroose @jcbrand @strypey oh, really? I thought it was using WebSockets and host-meta already directly connecting to target server... that's kind of... not nice...