From 8716a804bbda2dbc16066f44581e51cfa4f36521b30119a3b03ed6d56aef0abe Mon Sep 17 00:00:00 2001 From: Nicholas Johnson <> Date: Wed, 2 Sep 2026 00:00:00 +0000 Subject: Update about page with new signing key --- content/about.md | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/content/about.md b/content/about.md index b916414..7d5e73c 100644 --- a/content/about.md +++ b/content/about.md @@ -9,15 +9,21 @@ build: --- ## Signing Key -My LibrePlanet talk contains a slide (at timestamp 00:40) verifying that the signing key below belongs to me. +My post-quantum SSH signing key can be used to verify the authenticity of this journal. -[:key: Signify Key](/static/signify.pub) -[:tv: LibrePlanet Talk](https://media.libreplanet.org/u/libreplanet/m/taking-back-the-web-with-haketilo/) +```sh +# step 1 - clone this journal's Git repository +git clone --recursive 'https://git.nicholasjohnson.ch/journal/' && cd journal + +# step 2 - create an allowed signers file (e.g: ~/.ssh/allowed_signers) +{ printf '%s' 'nicholas '; curl -s https://nicholasjohnson.ch/static/signing-key_mldsa44_ed25519.pub; } > ~/.ssh/allowed_signers -The git-signify helper script can use my signing key to verify the authenticity of this journal. +# step 3 - configure Git to use the allowed signers file: +git config gpg.ssh.allowedSignersFile ~/.ssh/allowed_signers -[:closed_lock_with_key: Git-Signify](https://git.nicholasjohnson.ch/git-signify/) -[:notebook: Journal Git Repository](https://git.nicholasjohnson.ch/journal/) +# step 4 - verify commits! +git log --show-signature +``` ## Git Repositories -- cgit v1.2.3