> On Aug 25, 2024, at 12:37, sebb <seb...@gmail.com> wrote:
>
> On Sun, 25 Aug 2024 at 13:36, sebbaz(Test) <sebbaz+t...@gmail.com> wrote:
>
>> The SVN entries are intended for historic purposes to ensure we have a
>> copy of the key that was used to sign the document.
>> As such, they must not be deleted.
>>
>> In any case, the SVN entries are not directly used for validation.
>> GPG can only check a key that is in its database.
>>
>> I'm not sure there is a way to refresh keys at present.
>> This needs to be investigated further.
>>
>>
> I have updated Whimsy so that it always fetches the key when checking the
> signature.
Also, it looks like workbench only stores the key after using the key to
validate a filed document. Did I read that correctly?
Craig
Craig L Russell
c...@apache.org
