http://fedora.redhat.com/ and GPG Signatures

CJ Kucera fedora at apocalyptech.com
Fri Apr 23 21:30:20 UTC 2004


Jesse Keating wrote:
> Could it be that the one on the keyserver has been signed by various 
> folks?  Rpm checking against keys that have been signed is a no-no, 
> which is why Fedora offers up a unsigned key on their website for 
> usage.  The one on the server is signed to verify validity.

Could be...  I suppose if that's the case it'd be nice to have a note
on the website mentioning that.  Regardless, just thought I'd bring
it up.

-CJ

-- 
WOW: Kakistocracy        |  "The ships hung in the sky in much the same
apocalyptech.com/wow     |    way that bricks don't." - Douglas Adams,
fedora at apocalyptech.com  |     _The Hitchhiker's Guide To The Galaxy_





More information about the devel mailing list