<-- back to the mailing list

Digital signature in gemini pages

ew.gemini ew.gemini at nassur.net

Sat Feb 20 19:48:19 GMT 2021

- - - - - - - - - - - - - - - - - - - 

Hello Christophe,

Christophe HENRY writes:

Hi all!
Is there a way to set up pages that are signed with Gnupg? To allow
basic clients to not see anything, the signature would be in a separate
file.
The purpose is to make pages downloadable along with their source code
and signature.

I thought about signing things as well (trying to confirm, thatthese posts were published by the owner of the correspondingprivate key).=

gemini://gemini.circumlunar.space/~ew/2020/20201217-towards-a-proper-flightlog-4.gmi

I went for a file, which holds all sha512sums of all posts andfiles, and sign only that. This seemed like a good idea at thetime, because my average post was like 1500 Byte, and adding aclearsign signature would add something like 800 Bytes to everypost.

Now, a growing site will lead to a big sha512sums file, it isclearly not good for automated checking (by the browser).Currently I don't have better ideas other than to add suchsignature files per year (separate folder).

Cheers,~ew

-- Keep it simple!-------------- next part --------------A non-text attachment was scrubbed...Name: signature.ascType: application/pgp-signatureSize: 861 bytesDesc: not availableURL: <https://lists.orbitalfox.eu/archives/gemini/attachments/20210220/40fe36ab/attachment-0001.sig>