@cryptotaxi247 / documentation-1 / commits / 58fbc78

Update deprecation notice for pgp signatures (#64)

* Update deprecation notice for pgp signatures Epic: https://github.com/github/dsp/issues/572 Related: https://github.com/github/package-security/issues/17 Signed-off-by: Philip Harrison <philip@mailharrison.com> * Update copy to match blog Signed-off-by: Philip Harrison <philip@mailharrison.com> --------- Signed-off-by: Philip Harrison <philip@mailharrison.com>

Philip Harrison committed Mar 31, 2023 at 15:42 UTC 58fbc7874277fef07064d7a97fd6d87228cae9d1
3 files changed +3 -3
content/packages-and-modules/securing-your-code/about-pgp-signatures-for-packages-in-the-public-registry.mdx
+1 -1
@@ -3,7 +3,7 @@ title: About PGP registry signatures (deprecated)
3 ---
4 <Note>
5
6 -**Note:** PGP signatures will be deprecated early 2023, in favour of ECDSA registry signatures that can be verified using the npm CLI. [Learn more.](/about-registry-signatures)
6 +**Note:** PGP based registry signatures will be deprecated on **April 25th 2023** in favour of [ECDSA registry signatures](/about-registry-signatures). This means no new packages will be signed with PGP keys from this date onwards and the [public key hosted on Keybase](https://keybase.io/npmregistry) will expire.
7
8 </Note>
9
content/packages-and-modules/securing-your-code/about-registry-signatures.mdx
+1 -1
@@ -10,7 +10,7 @@ Signing and verifying published packages protects against an attacker controllin
10
11 <Note>
12
13 -**Note:** PGP signatures will be deprecated early 2023, in favour of ECDSA registry signatures. More information will soon be provided.
13 +**Note:** PGP based registry signatures will be deprecated on **April 25th 2023** in favour of ECDSA registry signatures. This means no new packages will be signed with PGP keys from this date onwards and the [public key hosted on Keybase](https://keybase.io/npmregistry) will expire.
14
15 </Note>
16
content/packages-and-modules/securing-your-code/verifying-the-pgp-signature-for-a-package-from-the-npm-public-registry.mdx
+1 -1
@@ -4,7 +4,7 @@ title: Verifying the PGP registry signature of a package from the npm public reg
4
5 <Note>
6
7 -**Note:** PGP signatures will be deprecated early 2023, in favour of ECDSA registry signatures that can be verified using the npm CLI. More information will soon be provided.
7 +**Note:** PGP based registry signatures will be deprecated on **April 25th 2023** in favour of [ECDSA registry signatures](/about-registry-signatures). This means no new packages will be signed with PGP keys from this date onwards and the [public key hosted on Keybase](https://keybase.io/npmregistry) will expire.
8
9 </Note>
10