Opened 5 months ago

Closed 5 months ago

#31858 closed defect (duplicate)

Retrival of public key failed. Include workaround link on website?

Reported by: redneptun Owned by: ggus
Priority: Medium Milestone:
Component: Webpages/Support Version:
Severity: Normal Keywords:
Cc: traumschule, trac-dip-importer, ggus Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I tried to verify a freshly downloaded tor browser on Ubuntu 18.04.3 LTS using the instructions found here: https://support.torproject.org/tbb/how-to-verify-signature/

gpg failed because of an unknown error related to WKD.

I asked for help at #tor-www and got it: a direct link to the key. https://openpgpkey.torproject.org/.well-known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf

I would like to propose including a link to the public key in the instructions (maybe as a workaround) since I would not have known how to obtain it otherwise.

Child Tickets

Change History (3)

comment:1 Changed 5 months ago by arma

I was the helper in this case.

I think having a backup advice is a good plan, for people where wkd won't work for them (either because gpg2 sucks at usability or because they're on a gpg too old to have wkd support).

My suggestion would be something like

curl -s https://openpgpkey.torproject.org/.well-known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf |gpg --import -

comment:2 Changed 5 months ago by ggus

Component: Webpages/WebsiteWebpages/Support
Owner: changed from hiro to ggus
Status: newassigned

comment:3 Changed 5 months ago by pili

Resolution: duplicate
Status: assignedclosed
Note: See TracTickets for help on using tickets.