4 ms·
These keys could have related signatures from other keys, that some users or maintainers may have reason to trust. (But for 30% of keys this was not even theor
by ploxiln 2y ago
These keys could have related signatures from other keys, that some users or maintainers may have reason to trust.
(But for 30% of keys this was not even theoretically possible, while for another 40% of keys it was not practically possible, according to the article.)
- upofadown 2y agoDo you mean like how Debian signs the keys of maintainers? My point is that nothing like that was done in this case. It is hard to know what went wrong when there didn't seem to be any policy in the first place.