Dev PGP keys: revoke Pieter Wuille's key

- Also add some hints for future maintainers about key revocation to
  README.md per discussion in PR #1120
This commit is contained in:
David A. Harding 2015-10-29 09:30:22 -04:00
parent 1b716470d5
commit 934043501b
No known key found for this signature in database
GPG key ID: 4B29C30FF29EC4B7
2 changed files with 2390 additions and 1831 deletions

View file

@ -870,3 +870,15 @@ Below the YAML front matter, enter the content of the post in Markdown
format. Images should be placed in `img/blog/free` if they are
MIT-licensed or `img/blog/nonfree` if they have a more restrictive
copyright license.
### Developer PGP keys
The site hosts the PGP keys for several Bitcoin Core contributors. Here
are some notes about updating those keys based on previous experience:
1. If a key is revoked, update the key with the revocation immediately.
Anyone with commit access to the site repository may do this without
prior review, but they should post the commit ID to an open issue or
PR so other people can review it. After the revoked key is uploaded,
discussion about verifying/adding a replacement key may continue at a
slower pace.