3 ms·
I think the analogy is a little off. This would be like someone having the GPG signing key for the Red Hat official repositories. It would give them the abilit
by porpoisemonkey 12y ago
I think the analogy is a little off.
This would be like someone having the GPG signing key for the Red Hat official repositories. It would give them the ability to insert their own (malicious) software package into the Red Hat update stream without the signature throwing any warnings.
- hyperion2010 12y agoIsn't that why we keep revocation certs around? That doesn't really work for blackmail anyway because it is dependent on preventing the organization from knowing that you have access.