diff --git a/docs/source/install.rst b/docs/source/install.rst index 761a66e1..7243680d 100644 --- a/docs/source/install.rst +++ b/docs/source/install.rst @@ -79,26 +79,38 @@ You can also find them on the `GitHub Releases page " - gpg: aka "Micah Lee " - gpg: aka "Micah Lee " - gpg: aka "Micah Lee " - gpg: aka "Micah Lee " + gpg: Signature made Mo 10 Okt 2022 02:27:16 CEST + gpg: using RSA key 927F419D7EC82C2F149C1BD1403C2657CD994F73 + gpg: Good signature from "Micah Lee " [unknown] + gpg: aka "Micah Lee " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 927F 419D 7EC8 2C2F 149C 1BD1 403C 2657 CD99 4F73 -If you don't see ``Good signature from``, there might be a problem with the integrity of the file (malicious or otherwise), and you should not install the package. (The ``WARNING:`` shown above, is not a problem with the package, it only means you haven't defined a level of "trust" of Micah's (the core developer) PGP key.) +If you don't see ``Good signature from``, there might be a problem with the integrity of the file (malicious or otherwise), and you should not install the package. + +The ``WARNING:`` shown above, is not a problem with the package, it only means you haven't defined a level of "trust" of Micah's (the core developer) PGP key. If you want to learn more about verifying PGP signatures, the guides for `Qubes OS `_ and the `Tor Project `_ may be useful.