Digital signature in gemini pages

[ew.gemini]

Hello Christophe,

Christophe HENRY writes:

> Hi all!
>
> Is there a way to set up pages that are signed with Gnupg? To allow
> basic clients to not see anything, the signature would be in a separate
> file.
>
> The purpose is to make pages downloadable along with their source code
> and signature.

I thought about signing things as well (trying to confirm, that
these posts were published by the owner of the corresponding
private key).
=> gemini://gemini.circumlunar.space/~ew/2020/20201217-towards-a-proper-flightlog-4.gmi

I went for a file, which holds all sha512sums of all posts and
files, and sign only that. This seemed like a good idea at the
time, because my average post was like 1500 Byte, and adding a
clearsign signature would add something like 800 Bytes to every
post.

Now, a growing site will lead to a big sha512sums file, it is
clearly not good for automated checking (by the browser).
Currently I don't have better ideas other than to add such
signature files per year (separate folder).

Cheers,
~ew




-- 
Keep it simple!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 861 bytes
Desc: not available
URL: <https://mailing-list-archive.gemi.dev/www/attachments/20210220/40fe36ab/attachment-0001.sig>