{"action":"created","issue":{"url":"https://api.github.com/repos/git-for-windows/git/issues/456","labels_url":"https://api.github.com/repos/git-for-windows/git/issues/456/labels{/name}","comments_url":"https://api.github.com/repos/git-for-windows/git/issues/456/comments","events_url":"https://api.github.com/repos/git-for-windows/git/issues/456/events","html_url":"https://github.com/git-for-windows/git/issues/456","id":109185692,"number":456,"title":"Implement package and database signing","user":{"login":"elieux","id":1399406,"avatar_url":"https://avatars.githubusercontent.com/u/1399406?v=3","gravatar_id":"","url":"https://api.github.com/users/elieux","html_url":"https://github.com/elieux","followers_url":"https://api.github.com/users/elieux/followers","following_url":"https://api.github.com/users/elieux/following{/other_user}","gists_url":"https://api.github.com/users/elieux/gists{/gist_id}","starred_url":"https://api.github.com/users/elieux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elieux/subscriptions","organizations_url":"https://api.github.com/users/elieux/orgs","repos_url":"https://api.github.com/users/elieux/repos","events_url":"https://api.github.com/users/elieux/events{/privacy}","received_events_url":"https://api.github.com/users/elieux/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/git-for-windows/git/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/git-for-windows/git/labels/sdk-packages","name":"sdk-packages","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"dscho","id":127790,"avatar_url":"https://avatars.githubusercontent.com/u/127790?v=3","gravatar_id":"","url":"https://api.github.com/users/dscho","html_url":"https://github.com/dscho","followers_url":"https://api.github.com/users/dscho/followers","following_url":"https://api.github.com/users/dscho/following{/other_user}","gists_url":"https://api.github.com/users/dscho/gists{/gist_id}","starred_url":"https://api.github.com/users/dscho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dscho/subscriptions","organizations_url":"https://api.github.com/users/dscho/orgs","repos_url":"https://api.github.com/users/dscho/repos","events_url":"https://api.github.com/users/dscho/events{/privacy}","received_events_url":"https://api.github.com/users/dscho/received_events","type":"User","site_admin":false},"milestone":null,"comments":7,"created_at":"2015-09-30T21:44:24Z","updated_at":"2015-10-05T09:23:13Z","closed_at":null,"body":"It seems that the package databases at Bintray are not signed, as well as the packages. It would be nice to have everything signed. I'm not sure if it has been discussed somewhere previously, and I apologize for the noise if it has.\r\n\r\nFor an overview of the process and requirements, see [my short pacman signing guide](https://gist.github.com/elieux/fad9451bbfc4ddb5cde7)."},"comment":{"url":"https://api.github.com/repos/git-for-windows/git/issues/comments/145473314","html_url":"https://github.com/git-for-windows/git/issues/456#issuecomment-145473314","issue_url":"https://api.github.com/repos/git-for-windows/git/issues/456","id":145473314,"user":{"login":"dscho","id":127790,"avatar_url":"https://avatars.githubusercontent.com/u/127790?v=3","gravatar_id":"","url":"https://api.github.com/users/dscho","html_url":"https://github.com/dscho","followers_url":"https://api.github.com/users/dscho/followers","following_url":"https://api.github.com/users/dscho/following{/other_user}","gists_url":"https://api.github.com/users/dscho/gists{/gist_id}","starred_url":"https://api.github.com/users/dscho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dscho/subscriptions","organizations_url":"https://api.github.com/users/dscho/orgs","repos_url":"https://api.github.com/users/dscho/repos","events_url":"https://api.github.com/users/dscho/events{/privacy}","received_events_url":"https://api.github.com/users/dscho/received_events","type":"User","site_admin":false},"created_at":"2015-10-05T09:23:13Z","updated_at":"2015-10-05T09:23:13Z","body":"I decided to roll back the signatures. This entire process was ill-planned, and of course I take al the blame for that. I thought that there was a gentle upgrade path, but of course reality proved my expectation to be truly ill-considered.\r\n\r\nFor now, I will recover from the experience and then maybe try to come up with a proper plan that does not affect existing as well as new users of the Git for Windows SDK negatively."}}