Re:SKS Keyserver Network Under Attack
by sirn on Saturday June 29, 2019 @11:56AM
(#20313270)
Ubuntu runs its own SKS keyserver (keyserver.ubuntu.com) and apk-add-repository use it when adding a PPA repository. I think in theory it's still possible to break package manager in Ubuntu if someone decide to poison a popular PPA repository/key.
[ Parent
| on HN ]