[Rpm-metadata] release/repo file - more stuff

Matt Zimmerman mdz at debian.org
Fri Nov 14 19:37:35 UTC 2003


On Fri, Nov 14, 2003 at 12:04:34PM -0500, Jeff Johnson wrote:

> There's more to key distribution than just listing a URI. What is needed
> first is some thought on why anyone should trust the URI encoded in
> metadata XML.

That trust would be based on the key itself, either through signatures from
third parties, or explicit trust by the user, and does not need to be
represented in the metadata.  However, being able to locate the key using
the metadata could be useful.

-- 
 - mdz



More information about the Rpm-metadata mailing list