{"action":"created","issue":{"url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/720","labels_url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/720/labels{/name}","comments_url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/720/comments","events_url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/720/events","html_url":"https://github.com/Bitmessage/PyBitmessage/issues/720","id":43356628,"number":720,"title":"Sourcecode isn't PGP signed","user":{"login":"petertodd","id":7042,"avatar_url":"https://avatars.githubusercontent.com/u/7042?v=3","gravatar_id":"","url":"https://api.github.com/users/petertodd","html_url":"https://github.com/petertodd","followers_url":"https://api.github.com/users/petertodd/followers","following_url":"https://api.github.com/users/petertodd/following{/other_user}","gists_url":"https://api.github.com/users/petertodd/gists{/gist_id}","starred_url":"https://api.github.com/users/petertodd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/petertodd/subscriptions","organizations_url":"https://api.github.com/users/petertodd/orgs","repos_url":"https://api.github.com/users/petertodd/repos","events_url":"https://api.github.com/users/petertodd/events{/privacy}","received_events_url":"https://api.github.com/users/petertodd/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"PeterSurda","id":3815204,"avatar_url":"https://avatars.githubusercontent.com/u/3815204?v=3","gravatar_id":"","url":"https://api.github.com/users/PeterSurda","html_url":"https://github.com/PeterSurda","followers_url":"https://api.github.com/users/PeterSurda/followers","following_url":"https://api.github.com/users/PeterSurda/following{/other_user}","gists_url":"https://api.github.com/users/PeterSurda/gists{/gist_id}","starred_url":"https://api.github.com/users/PeterSurda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PeterSurda/subscriptions","organizations_url":"https://api.github.com/users/PeterSurda/orgs","repos_url":"https://api.github.com/users/PeterSurda/repos","events_url":"https://api.github.com/users/PeterSurda/events{/privacy}","received_events_url":"https://api.github.com/users/PeterSurda/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/Bitmessage/PyBitmessage/milestones/1","html_url":"https://github.com/Bitmessage/PyBitmessage/milestones/v0.6.0","labels_url":"https://api.github.com/repos/Bitmessage/PyBitmessage/milestones/1/labels","id":1362166,"number":1,"title":"v0.6.0","description":"Next stable release","creator":{"login":"PeterSurda","id":3815204,"avatar_url":"https://avatars.githubusercontent.com/u/3815204?v=3","gravatar_id":"","url":"https://api.github.com/users/PeterSurda","html_url":"https://github.com/PeterSurda","followers_url":"https://api.github.com/users/PeterSurda/followers","following_url":"https://api.github.com/users/PeterSurda/following{/other_user}","gists_url":"https://api.github.com/users/PeterSurda/gists{/gist_id}","starred_url":"https://api.github.com/users/PeterSurda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PeterSurda/subscriptions","organizations_url":"https://api.github.com/users/PeterSurda/orgs","repos_url":"https://api.github.com/users/PeterSurda/repos","events_url":"https://api.github.com/users/PeterSurda/events{/privacy}","received_events_url":"https://api.github.com/users/PeterSurda/received_events","type":"User","site_admin":false},"open_issues":25,"closed_issues":1,"state":"open","created_at":"2015-10-18T09:05:30Z","updated_at":"2015-10-18T14:53:41Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2014-09-22T03:01:26Z","updated_at":"2015-10-18T19:22:00Z","closed_at":null,"body":"I noticed that neither tags nor commits are PGP signed. This really needs to be fixed - right now bitmessage users are trusting github. Bitcoin Core now signs both tags and individual git commits; Signing tags is pretty simple, just use the -s flag with git tag. As for git commits, Wladimir wrote up a good description of how to do this here: https://www.mail-archive.com/bitcoin-development%40lists.sourceforge.net/msg05467.html"},"comment":{"url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/comments/149040306","html_url":"https://github.com/Bitmessage/PyBitmessage/issues/720#issuecomment-149040306","issue_url":"https://api.github.com/repos/Bitmessage/PyBitmessage/issues/720","id":149040306,"user":{"login":"mailchuck","id":14903281,"avatar_url":"https://avatars.githubusercontent.com/u/14903281?v=3","gravatar_id":"","url":"https://api.github.com/users/mailchuck","html_url":"https://github.com/mailchuck","followers_url":"https://api.github.com/users/mailchuck/followers","following_url":"https://api.github.com/users/mailchuck/following{/other_user}","gists_url":"https://api.github.com/users/mailchuck/gists{/gist_id}","starred_url":"https://api.github.com/users/mailchuck/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mailchuck/subscriptions","organizations_url":"https://api.github.com/users/mailchuck/orgs","repos_url":"https://api.github.com/users/mailchuck/repos","events_url":"https://api.github.com/users/mailchuck/events{/privacy}","received_events_url":"https://api.github.com/users/mailchuck/received_events","type":"User","site_admin":false},"created_at":"2015-10-18T19:22:00Z","updated_at":"2015-10-18T19:22:00Z","body":"I now successfully tested that I can decrypt emails sent to dev@mailchuck.com. I'll do the same for the other account. It's a bit of a hassle as I need to manually copy&paste, but integrating GPG with PyBitmessage is a long term plan."}}