[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#389646: apt should try to import a key if a package was signed by a unknown key



Otavio,

> It'll reduce the security of machine since won't make difference if
> the key is or not know before you upgrade or install a package.

Agreed; an idea might be to import the key to some "untrusted" keyring,
and allow the user to add it to the "trusted" list after giving some
stern lecture why you shouldn't trust anyone.

   Simon



Reply to: