add a note about signify compatibility

based on the discussion in #59
This commit is contained in:
Chad Dougherty 2025-03-11 13:12:46 -04:00 committed by GitHub
parent d973a7dd96
commit 4da38c86dd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -228,6 +228,16 @@ minisign -V [-H] [-x sig_file] [-p pubkey_file | -P pubkey] [-o] [-q] -m file
attacks). attacks).
</p> </p>
<p>
OpenBSD's <a href="https://man.openbsd.org/signify">signify(1)</a>
is conceptually similar to minisign. Minisign creates signatures
that can be verified by signify, but signatures created by signify
<b>cannot</b> be verified by minisign because minisign expects
the trusted comment section to be present. Trusted comments are
important to describe what has been signed in addition to the fact
that something has been signed.
</p>
<h2> <h2>
<a <a
id="compilation--installation" id="compilation--installation"