New Signing Key?

Thanks for taking care of it, @MnM !

Let me get this straight:

In the Bisq repository, I find commits from user “alejandrogarcia83” with two different signatures:

  1. his personal GPG signature: used when he does “classic” work (e.g. remote work using git push)
  2. any GitHub GPG signature: used when he works via the GitHub WebGUI.

This is not obvious to me as a user (and thus possibly to others) without explanation and leads to confusion in key verification. Is there a better way to do this?

1 Like