Merge #3: [contrib] Move all keys to contrib/gitian-keys

48fe3e4 [gitian] Move keys to contrib/gitian-keys (Mitchell Cash)

Pull request description:

  I have only left the fingerprints of the active developers who are currently contributing code and signing builds.

  If I left you off just make a new pull request with your pgp fingerprint.

Tree-SHA512: c9f34296ebfd9df24539080f1f09b07bc7b8142e44692260db0a9ec41fac5d51f3acb1b2637191d0a0ba0040f59a4fcf06cb532768c55d367386d922c123396f

contrib/gitian-keys/README.md

@@ -0,0 +1,27 @@
+## PGP keys of Gitian builders and Developers
+
+The file `keys.txt` contains fingerprints of the public keys of Gitian builders
+and active developers.
+
+The associated keys are mainly used to sign git commits or the build results
+of Gitian builds.
+
+The most recent version of each pgp key can be found on most pgp key servers.
+
+Fetch the latest version from the key server to see if any key was revoked in
+the meantime.
+To fetch the latest version of all pgp keys in your gpg homedir,
+
+```sh
+gpg --refresh-keys
+```
+
+To fetch keys of Gitian builders and active developers, feed the list of
+fingerprints of the primary keys into gpg:
+
+```sh
+while read fingerprint keyholder_name; do gpg --keyserver hkp://subset.pool.sks-keyservers.net --recv-keys ${fingerprint}; done < ./keys.txt
+```
+
+Add your key to the list if you provided Gitian signatures for two major or
+minor releases of ION Core.