Alternative to sourcehut

[Victor Sudakov]

Ludovic Chabant wrote:
> 
> > I did not quite figure out how to subscribe to some general discussion
> > sr.ht mailing list. I've only found how to create my own list, but
> > it's not what I'm going to do now.
> 
> If you go to a mailing list on the website (like, say,
> https://lists.sr.ht/~sircmpwn/sr.ht-discuss) 

Well, where is the list of lists? :-)

> > Another question. Encrypted mails from outgoing at sr.ht are signed by
> > some A38A93AE PGP key, how and where do I verify that key?
> 
> I'm not 100% sure but if you go to your profile settings on meta.sr.ht,
> in the "Keys" sections, you can specify your PGP pubkey and ask
> sourcehut to send you a test email to verify that encryption is working.
> That email tells you what the server PGP pubkey is.
> 
> I suppose that's already what you did. But since sourcehut is open
> source and lets anybody install it on their servers, any install of
> sourcehut would have its own PGP keys, so whatever the server tells you
> it's using is whatever the admin set in the server config and, well,
> that's pretty much it.
> 
> Now maybe you're asking for whether you can check if the specific server
> at https://sr.ht (as opposed to another sourcehut install) has the key
> that its admins think it has, and for that we would, I guess, require
> some information published on a different server... 

As far as I'm concerned, publishing the key on  https://sr.ht itself
would be sufficient.


> maybe you can ping
> Drew (https://drewdevault.com/) so that he publishes the expected sr.ht
> PGP pubkey on a separate server.

Or even on the same server? 

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49 at fidonet http://vas.tomsk.ru/