[Rpm-metadata] release/repo file - more stuff
Matt Zimmerman
mdz at debian.org
Fri Nov 14 19:37:35 UTC 2003
On Fri, Nov 14, 2003 at 12:04:34PM -0500, Jeff Johnson wrote:
> There's more to key distribution than just listing a URI. What is needed
> first is some thought on why anyone should trust the URI encoded in
> metadata XML.
That trust would be based on the key itself, either through signatures from
third parties, or explicit trust by the user, and does not need to be
represented in the metadata. However, being able to locate the key using
the metadata could be useful.
--
- mdz
More information about the Rpm-metadata
mailing list