Previously it was only Eeclo doing releases that were signed with B541D55301270E0BCF15CA5D8170B4726D7198DE. Other linux distributions have the expectation (rightfully so) that our tags are signed. Let's document this. We could do cross-signing to make tracing the chain of trust easier for all Nix team members [1]. [1]: https://nixos.org/community/teams/nix/
Maintainer GPG Keys
Release tags are signed by members of the Nix maintainer team as part of the release process. This directory contains the public GPG keys used for signing.
Keys
-
Eelco Dolstra GPG Fingerprint:
B541 D553 0127 0E0B CF15 CA5D 8170 B472 6D71 98DE -
Sergei Zimmerman GPG Fingerprint:
158A 6F53 0EA2 02E5 F651 6113 14FA EA63 448E 1DF9