Mikkel L. Ellertson wrote:
Let me see - The Gnupg package is included with Fedora. RPMs are signed with a GPG key - each version has its own key. The extra repositories have their own keys. When their was a possibility that the keys had been compromised, new keys were issued. It is not like Fedora isn't already using gpg... About the only change I can see would be signing the files needed to do a network install...
I was talking about the community more, than about the repos. Is GnuPG widely used in the community? How about the people from M$ world?
Again: promoting GnuPG would promote: * GNU * free software * security and authenticity * bazaar model * mutual trust all at the same time.Maybe that would be better than to sit and wait for Microsoft/whatever to sell everybody his X.509.... Wide use of encryption/digital signatures will come sooner or later, I guess.
STF ======================================================================= http://eisenbits.homelinux.net/~stf/ OpenPGP: 9D25 3D89 75F1 DF1D F434 25D7 E87F A1B9 B80F 8062 =======================================================================
Description: OpenPGP digital signature