4 ms·
> Usually step 1 in installing software from external developer is "get my PGP key imported" [0]. Even #%@! Oracle does it: https://www.virtualbox.org/wiki/Li
by acqq 8y ago
> Usually step 1 in installing software from external developer is "get my PGP key imported" [0].
Even #%@! Oracle does it:
https://www.virtualbox.org/wiki/Linux_Downloads https://www.virtualbox.org/wiki/Linux_Downloads
I wonder what’s the point of the PGP key then.
- Leace 8y ago> I wonder what’s the point of the PGP key then. Trust on First Use. Once the key is imported it stays the same. People working for that organization can sign the key to attest it's real (Web of Trust). Although I wonder how would they check it. Organization (non-individual) keys are weird because ultimately it's just an individual behind it.