Re: [gobolinux-devel] Signature of binary packages

2006-06-28 Thread MJ Ray
MLA-Gobo <[EMAIL PROTECTED]> wrote: > Ah--I think I see. So by "main keyserver network," you mean something l= > ike=20 > pgp.mit.edu or keyserver.veridis.com, right? Ok, that makes sense. I was thinking of pgp.net, but most of them seem to sync with each other. Hope that explains, -- MJ Ray

Re: [gobolinux-devel] Signature of binary packages

2006-06-28 Thread MLA-Gobo
On Tuesday 27 June 2006 19:00, MJ Ray wrote: > OK, so let GPG download from the main keyserver network.  It > doesn't really matter and still doesn't need any hunting or > inclusion of a URL which will expire sometimes. Ah--I think I see. So by "main keyserver network," you mean something like

Re: [gobolinux-devel] Signature of binary packages

2006-06-27 Thread MJ Ray
:Peter wrote: > For unofficial, third-party packages, there needs to be a way > of fetching keys that, by definition, can't be stored on an official server. OK, so let GPG download from the main keyserver network. It doesn't really matter and still doesn't need any hunting or inclusion of a URL

Re: [gobolinux-devel] Signature of binary packages

2006-06-27 Thread MLA-Gobo
On Tuesday 27 June 2006 10:32, MJ Ray wrote: > IIRC debian solves this problem with the debian-keyring > package (to get you started quickly, you want the keys on > the installation CD really) and you can set gpg to download > unknown keys automatically from the keyservers of your choice > (keyring

Re: [gobolinux-devel] Signature of binary packages

2006-06-27 Thread MJ Ray
IIRC debian solves this problem with the debian-keyring package (to get you started quickly, you want the keys on the installation CD really) and you can set gpg to download unknown keys automatically from the keyservers of your choice (keyring.gobolinux.org?). Maybe InstallPackage could call gpg

[gobolinux-devel] Signature of binary packages

2006-06-27 Thread Hisham Muhammad
This started as a quick off-list email exchange but evolved to the point we think it should be discussed on-list: -- Forwarded (and translated :-D ) message follows -- On 6/27/06, Lucas C. Villa Real <[EMAIL PROTECTED]> wrote: On 6/27/06, Hisham Muhammad <[EMAIL PROTECTED]> wrote: > On 6/27/06,