GrapheneOS on Nostr: Factory images signing is still a bit useful and we plan to replace signify with ...
Factory images signing is still a bit useful and we plan to replace signify with OpenSSH for this purpose to use a tool that's more broadly available. Even Windows and macOS ship with recent enough OpenSSH. We'll use same key we use for Git tag signing:
https://grapheneos.social/@GrapheneOS/109635419614446247Published at
2023-05-11 16:01:17Event JSON
{
"id": "280346217f17b87b576ed6157c52e5b341ed0c418e373bfbd73e8dad1bf034b5",
"pubkey": "5468bceeb74ce35cb4173dcc9974bddac9e894a74bf3d44f9ca8b7554605c9ed",
"created_at": 1683820877,
"kind": 1,
"tags": [
[
"e",
"39dec722ee00804a8c9ed6dc1f600c308e849937c555949a6b89c7457a68bdf8",
"wss://relay.mostr.pub",
"reply"
],
[
"mostr",
"https://grapheneos.social/users/GrapheneOS/statuses/110350885039685028"
]
],
"content": "Factory images signing is still a bit useful and we plan to replace signify with OpenSSH for this purpose to use a tool that's more broadly available. Even Windows and macOS ship with recent enough OpenSSH. We'll use same key we use for Git tag signing:\n\nhttps://grapheneos.social/@GrapheneOS/109635419614446247",
"sig": "670ca49c7074a9a9d5eaf29aac8e8f724435e17f4c8b2ce366d1ea052deb2cbb4e0ad620f6d3bd9c01220668c526ef2b39bffd88039cd291f31a39e46503f1ae"
}