Add gpg key

[dvzrv]

Hi @JonnyJD!
I'm currently packaging python-discid for Arch Linux. Could you please add the public key for 68304838CC686607 to your account so that the tags show up as verified? Thanks! :)

[dvzrv]

I just realized that the key in question is a 1024 bit DSA key. Please refrain from using it, as DSA is broken.
If you intend to use signed tags or commits in the future please consider creating a new key that is either at least 4096bit RSA or of some new curve type (e.g. ed25519).

As is the signatures can (but should not) be used by downstreams to verify the authenticity of releases.

[phw]

The new releases will be signed with my GPG key ID: 8FDF744D4919943B . Same as for https://github.com/metabrainz/picard/

[mavit]

Where can we find the signature?

[phw]

The key is also published on https://keyserver.ubuntu.com/pks/lookup?search=8FDF744D4919943B&fingerprint=on&op=index

Key ID: 8FDF744D4919943B
Fingerprint: E73E 09EA 7BB6 5B7C F373 A0AF 8FDF 744D 4919 943B