[Pkg-privacy-maintainers] Bug#819305: parcimonie: Consider passing "--import-options merge-only" to gpg

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Mar 28 23:17:38 UTC 2016


On Sat 2016-03-26 08:09:37 -0400, intrigeri at debian.org wrote:
> Package: parcimonie
> Version: 0.9-3
> Severity: minor
> X-Debbugs-Cc: Daniel Kahn Gillmor <dkg at fifthhorseman.net>
>
> This would avoid issues that might be caused by "gpg --recv-keys" not
> checking much of the downloaded key, even when passed a fingerprint.
>
> Just a random idea, this needs to be checked more carefully.

fwiw, i think this is worth doing for parcimonie, even if it doesn't
solve all the possible problems.

      --dkg



More information about the Pkg-privacy-maintainers mailing list