We in Multipass are following LXD's suit, they've decided against GPG for cross-platform and key revocation reasons.
Streams are accessed via HTTPS, the assumption being that as long as your HTTPS connection to the host is good verified, the streams are considered trusted. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1919339 Title: streams should be gpg signed & gpg verified To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-images/+bug/1919339/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
