IIRC debian solves this problem with the debian-keyring package (to get you started quickly, you want the keys on the installation CD really) and you can set gpg to download unknown keys automatically from the keyservers of your choice (keyring.gobolinux.org?). Maybe InstallPackage could call gpg with the right options to use goboring and download unknown keys from an official server?
Including a download URL in the package seems unnecessary. Hope that helps, -- MJ Ray - personal email, see http://mjr.towers.org.uk/email.html Work: http://www.ttllp.co.uk/ irc.oftc.net/slef Jabber/SIP ask _______________________________________________ gobolinux-devel mailing list gobolinux-devel@lists.gobolinux.org http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
