On Sat 2016-03-26 08:09:37 -0400, intrig...@debian.org wrote: > Package: parcimonie > Version: 0.9-3 > Severity: minor > X-Debbugs-Cc: Daniel Kahn Gillmor <d...@fifthhorseman.net> > > This would avoid issues that might be caused by "gpg --recv-keys" not > checking much of the downloaded key, even when passed a fingerprint. > > Just a random idea, this needs to be checked more carefully.
fwiw, i think this is worth doing for parcimonie, even if it doesn't solve all the possible problems. --dkg