primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2026-02-01 14:39:39 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

home/gpg: reduce trust of other people

Browse source
This commit is contained in:
Primrose 2026-01-17 21:52:45 +01:00
parent 6ae3f6932d
commit fd5e046406
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nix/homeModules/common/gpg.nix
View file

@ -5,13 +5,17 @@
gpg-agent.pinentry.package = pkgs.pinentry-tty; gpg-agent.pinentry.package = pkgs.pinentry-tty;
}; };
# Fun video btw
# https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i
programs.gpg.publicKeys = programs.gpg.publicKeys =
let let
fromUrl = fromUrl =
{ {
url, url,
hash, hash,
trust ? 5, # https://security.stackexchange.com/a/69089
# One lower than ultimate (introducer in the web of trust) is good enough.
trust ? 4,
}: }:
{ {
source = pkgs.fetchurl { inherit url hash; }; source = pkgs.fetchurl { inherit url hash; };
@ -27,6 +31,7 @@
{ {
user = "leana8959"; user = "leana8959";
hash = "sha256-Y+v/8bLkyUIe4vjToChQP3ChPxRV/DqI72OTsx6F0oo="; hash = "sha256-Y+v/8bLkyUIe4vjToChQP3ChPxRV/DqI72OTsx6F0oo=";
trust = 5;
} }
{ {
user = "vanilla-extracts"; user = "vanilla-extracts";