On Fri, 24 Jul 2020 Andrew Cater wrote:
And it turns out that /etc/apt/trusted.gpg has the buster-stable, the buster-automatic and the buster-security keys by default but _NOT_ the debian-cd signing key so the stage of importing the key to match the specific Debian CD signing key is still valid.
If you are doing all this on a debian system you trust, the keys you want are installed by the package debian-keyring in /usr/share/keyrings/debian-role-keys.gpg About one month ago I detailed here how they can be used: lists.debian.org/msgid-search/alpine.DEB.2.21.2006240945240.28857@azone.org -- Ce qui est important est rarement urgent et ce qui est urgent est rarement important -- Dwight David Eisenhower