git / moonbite-network / deploy/moonbite-release.pub · raw

# MoonBite release signing key (minisign public key).## This is a PLACEHOLDER. Until the line below is replaced with a real minisign# public key, the installers and the bundle builder run in sha256-integrity-only# mode and print a loud warning: downloads are checked for corruption but NOT# for authenticity, so a malicious origin swap is not yet detectable.## To activate signing, follow deploy/RELEASE-SIGNING.md:#   1. On an OFFLINE machine, generate the key:  minisign -G -p moonbite-release.pub -s moonbite-release.key#   2. Keep moonbite-release.key offline, passphrase-protected. NEVER commit it.#   3. Paste the generated public key line (starts "RW...") below, replacing REPLACE_ME.#   4. Publish this same public key on moonbite.org and in the repo README so#      users can pin it independently of any single origin.## The line below MUST be a single minisign public key (untrusted-comment line# optional). Everything starting with '#' is ignored by the installers.REPLACE_ME_WITH_MINISIGN_PUBLIC_KEY