News for hackers. Stuff that matters.

A comment on Ditching OpenPGP, a new approach to signing APT repositories. Parent comment

Re:Ditching OpenPGP, a new approach to signing APT repositories by julian-klode on Tuesday June 22, 2021 @01:22PM (#27594441)
gpg precisely has valid signature and good signature to distinguish signatures that are technically valid from good signatures.

e.g. a valid signature can be expired, so it's not good or shit like that.

So, the argument is flawed.

[ Parent | on HN ]

There are no comments on this comment yet.