Re: [bisq-network/bisq] In-App Update Fails to Verify. Manual D/Load 0, 8, 0 Also Fails to Verify – No Public Key (#1679)

[madra.net]

...and trying to import the key from the URL given in the docs says the signature is "Good" but then warns it's "not certified with a trusted signature!"  Which may still mean it's OK –the fingerprints match– so maybe it's just like a self-signed cert warning on HTTPS? But it's certainly confusing for those of us [like me] who aren't that well up on the intricacies of PGP signatures, etc. 

Do I trust it or not?

![2018-09-12_11-07-51](https://user-images.githubusercontent.com/669658/45418330-1fc4ef00-b67c-11e8-8e8a-1020e30de465.png)

```
$>  curl https://bisq.network/pubkey/29CDFD3B.asc | gpg --import
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3110  100  3110    0     0  10917      0 --:--:-- --:--:-- --:--:-- 10950
gpg: key CD5DC1C529CDFD3B: "Christoph Atteneder <christoph.atteneder at gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
$>  gpg --verify Bisq-0.8.0.dmg{.asc*,}
gpg: Signature made Wed 22 Aug 11:50:08 2018 BST
gpg:                using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg:                issuer "christoph.atteneder at gmail.com"
gpg: Good signature from "Christoph Atteneder <christoph.atteneder at gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B
```

Oh. And BTW, the docs don't mention having to import the key first, at all. They just give that one-liner for verifying it.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/1679#issuecomment-420592568
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20180912/e5b21fa5/attachment-0001.html>