Update 3 about Bisq Exploit response

Why would Alejandro’s key not work? This is the potential crisis I hope to see you guys avoid. Since only Alejandro’s key has been used for recent releases, switching to a different key is going to be an indication of a compromise. It’s not enough to have “some key” sign the release, it’s very important to have consistent chain. If any key other than B493319106CC3D1F252E19CBF806F422E222AA02 signs the new release, it is 0.00% “covered. That’s how PGP/GPG and trust works.

1 Like