Re: officially signed packages

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Sun, Apr 06, 2014 at 10:07:48PM +0200, Fredrik Pettai wrote:
> > I think that's possible for X509-based signatures.
> 
> x509 doesn't sound appealing compared to GPG, from an "admin" PoV though… 
> having to do the whole PKI-dance

This doesn't make sense. The setup amount is the same -- drop a cert
file or trusted ring in the right location and be done.

Joerg