running gpg --verify *.sign on all sign files found where debian-buster is downloaded returns bad key and [unknown] on those files. I think the website has got dirty.



--

Reply via email to