GPG wasn't chosen because it's not as secure as content trust. Content trust provides all that GPG provides plus: - Replay attack prevention - Freshness guar

GPG wasn't chosen because it's not as secure as content trust. Content trust provides all that GPG provides plus: - Replay attack prevention - Freshness guarantees (so you can't be given older, vulnerable images) - Trusted, delegated signing