From Fedora's blog: An alternative was producing some sort of overall Linux key. It turns out that this is also difficult, since it would mean finding an entit

From Fedora's blog: An alternative was producing some sort of overall Linux key. It turns out that this is also difficult, since it would mean finding an entity who was willing to take responsibility for managing signing or key distribution. That means having the ability to keep the root key absolutely secure and perform adequate validation of people asking for signing. That's expensive. Like millions of dollars expensive. It would also take a lot of time to set up, and that's not really time we had. And, finally, nobody was jumping at the opportunity to volunteer. So no generic Linux key. http://mjg59.dreamwidth.org/12368.html http://mjg59.dreamwidth.org/12368.html