Hi Owen,

On Wed, Oct 20, 2021 at 9:25 PM Owen Gunden via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org> wrote:
On Wed, Oct 20, 2021 at 04:47:17PM +0200, Prayank wrote:
> > It seems confusing to have two sites that seemingly both represent
> > bitcoin core.
>
> There is only one website which represents Bitcoin Core full node
> implementation. You can download Bitcoin Core from
> https://bitcoincore.org

I also notice that, as of 22.0, Wladimir is no longer signing the
releases, and I have no trust in my gpg network of the people who seem
to have replaced him.

He is taking the most sensible way forward, decreasing bus factor.

Read: https://laanwj.github.io/2021/01/21/decentralize.html
 

Given the level of security at stake here, my eyebrows are raised at
this combination of items changing (new website + new gpg signers at the
same time).

Don't worry and build your own release;
but if you do, always verify the tree hash.
Trust signed annotated tags.
Cheers!
 

_______________________________________________
bitcoin-dev mailing list
bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev