Pieter Wuille (sipa) is signing commits with an unverifiable PGP key #5956

issue b6393ce9-d324-4fe1-996b-acf82dbc3d53 opened this issue on March 31, 2015

b6393ce9-d324-4fe1-996b-acf82dbc3d53 commented at 4:51 AM on March 31, 2015: none
Apparently, Pieter Wuille (sipa) is signing commits with RSA key ID F8F0B657, the public key of which is not listed anywhere meaningful (if anywhere at all).

In particular, at this location:
- https://bitcoin.org/en/development
there is listed (among other developers' PGP keys) Pieter Wuille's key with ID 1DAAC974, which is also mirrored by MIT's PGP keyserver. However, this is not what he's using to make the signatures for objects in Bitcoin's git repository.
fanquake commented at 5:06 AM on March 31, 2015: member

F8F0B657 is one of the subkeys of 1DAAC974

It's also listed here http://pgp.mit.edu/pks/lookup?op=vindex&search=0xB9A408E71DAAC974
b6393ce9-d324-4fe1-996b-acf82dbc3d53 commented at 5:15 AM on March 31, 2015: none
Thanks! I imported the data provided by MIT's keyserver:
- https://pgp.mit.edu/pks/lookup?op=get&search=0xB9A408E71DAAC974
Now, I have that subkey; apparently, bitcoin.org needs to update this file:
- https://bitcoin.org/pieterwuille.asc
laanwj closed this on Apr 2, 2015
MarcoFalke locked this on Sep 8, 2021

Contributors