32 ms·
APT can automatically verify GPG signatures against a preinstalled keyring. Obviously, that doesn't help in the case of this particular incident (ISOs), but it
by ajdlinux 11y ago
APT can automatically verify GPG signatures against a preinstalled keyring. Obviously, that doesn't help in the case of this particular incident (ISOs), but it does help in day-to-day updates.
- jnbiche 11y agoNot sure why this was downvoted, since it's true. apt does this by default, in fact. GPG is immensely useful for securely distributing packages and distros.