Secrecy and user trust

Patrick O'Callaghan pocallaghan at gmail.com
Thu Sep 4 16:41:20 UTC 2008


On Thu, 2008-09-04 at 17:16 +0100, Bill Crawford wrote:
> On 04/09/2008, Todd Zullinger <tmz at pobox.com> wrote:
> 
> > Since rpm/yum don't have any method to handle a key revocation, this
> > process is harder than it might otherwise be.
> 
> "rpm -e --allmatches gpg-pubkey-$fingerprint" not enough? ;o)

Revocation doesn't just mean removing a key, it means declaring it to be
invalid so it won't be used in the future.

poc




More information about the fedora-list mailing list