<p><a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/dscotese/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dscotese">@dscotese</a> commented on <a href="https://github.com/bisq-network/bisq/issues/3083" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/3083/hovercard">Wed Aug 14 2019</a></p>
<p>The "PGP Signatures" entry on the download page (<a href="https://bisq.network/downloads/" rel="nofollow">https://bisq.network/downloads/</a>) ends up providing the Release Notes instead of the folder containing the signatures.  I found the file I needed (<a href="https://bisq.network/downloads/v1.1.5/Bisq-64bit-1.1.5.exe.asc" rel="nofollow">https://bisq.network/downloads/v1.1.5/Bisq-64bit-1.1.5.exe.asc</a>) by simply guessing that adding the .asc to the end of the link to the .exe would get it.  The "PGP Signatures" link should point to a new page that has a link to each of the .asc files.</p>
<hr>
<p><a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/battleofwizards/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/battleofwizards">@battleofwizards</a> commented on <a href="https://github.com/bisq-network/bisq/issues/3083#issuecomment-521125514" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/3083/hovercard">Wed Aug 14 2019</a></p>
<p>All signatures are present on the Release Notes page down below the text content. Seek assets.</p>
<p>The confusion comes from the fact that Release Notes are very long and the actual downloadable assets are buried deep.</p>
<p>I'm afraid GitHub does not offer linking to catalogs of released files. One can only link the page and individual files.</p>
<p>One solution would be to <strong>link</strong> the release notes file instead of putting the text directly on the page. This would be inline with Bitcoin Core: <a href="https://github.com/bitcoin/bitcoin/releases">https://github.com/bitcoin/bitcoin/releases</a> and would ensure the assets are easily visible by the users.</p>
<hr>
<p><a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/dscotese/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dscotese">@dscotese</a> commented on <a href="https://github.com/bisq-network/bisq/issues/3083#issuecomment-521371292" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/3083/hovercard">Wed Aug 14 2019</a></p>
<p>If updating the release notes is possible, the issue I had can be fixed by adding a line to the "How To Verify" section. I forked the repo but could not see where the release notes file was for me to make this change and then a pull request.  Here is how that section would look (with the line I'd add in <strong>bold</strong>):</p>
<p>How to verify signatures?<br>
<strong>Download the *.asc file for the file you downloaded ("BINARY" below) from the bottom of this page</strong><br>
<code>gpg --digest-algo SHA256 --verify BINARY{.asc*,}</code><br>
Replace BINARY with the file you downloaded (e.g. Bisq-1.1.5.dmg)</p>
<p>... and since I like to explain things, I'd also add this:<br>
<strong>gpg will search the download folder for the file you downloaded (it recognizes and remove the ".asc" to do this) and use the specified file to verify it using the signer's key.</strong></p>
<hr>
<p><a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/freimair/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/freimair">@freimair</a> commented on <a href="https://github.com/bisq-network/bisq/issues/3083#issuecomment-533054943" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/3083/hovercard">Thu Sep 19 2019</a></p>
<p>that is confusing I agree. How about changing the download page and add links to the signature files right behind the binaries?<br>
<a target="_blank" rel="noopener noreferrer" href="https://user-images.githubusercontent.com/1070734/65233389-08acae80-dad3-11e9-9985-65f129f0a59f.png"><img src="https://user-images.githubusercontent.com/1070734/65233389-08acae80-dad3-11e9-9985-65f129f0a59f.png" alt="Screenshot from 2019-09-19 11-45-29" style="max-width:100%;"></a></p>
<hr>
<p><a class="user-mention" data-hovercard-type="organization" data-hovercard-url="/orgs/Stale/hovercard" href="https://github.com/Stale">@Stale</a>[bot] commented on <a href="https://github.com/bisq-network/bisq/issues/3083#issuecomment-566971610" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/3083/hovercard">Wed Dec 18 2019</a></p>
<p>This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/bisq-network/bisq-website/issues/317?email_source=notifications&email_token=AJFFTNVHNY2AHDBR5JJ4LI3QZM5PDA5CNFSM4J5AZP6KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IBSUEXQ">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AJFFTNW3XRTU4IINMOJ62PDQZM5PDANCNFSM4J5AZP6A">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AJFFTNSYBWNFO6ZTCGEXBI3QZM5PDA5CNFSM4J5AZP6KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IBSUEXQ.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/bisq-network/bisq-website/issues/317?email_source=notifications\u0026email_token=AJFFTNVHNY2AHDBR5JJ4LI3QZM5PDA5CNFSM4J5AZP6KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IBSUEXQ",
"url": "https://github.com/bisq-network/bisq-website/issues/317?email_source=notifications\u0026email_token=AJFFTNVHNY2AHDBR5JJ4LI3QZM5PDA5CNFSM4J5AZP6KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IBSUEXQ",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>