GPG-pubkeys

[Jeff Johnson]

On Sep 11, 2006, at 3:10 AM, Christoph Thiel wrote:

> On Sat, 9 Sep 2006, Basil Chupin wrote:
>
>> Further to the earlier thread, "F**** annoying unavailable keys",  
>> but on
>> a slightly different tack, is there a way to make smart to simply
>> *accept* an offered gpg-key when smart is upgrading a package rather
>> than have it sit like a shag on a rock waiting for me (for  
>> example) to
>> click on YES so that smart can continue with the download of the
>> package?
>
> This would render any kind of key checking useless, as smart would  
> accept
> any key that's available on the configured keyserver.
>

Accepting every key is a valid policy that should be supported as well
as other policies.

> I'm currently looking into enabling -y / --yes to work with key  
> checking
> as well, so you could just use "smart upgrade -y" then... however,  
> it's
> just like completly turning of key checking in the end.
>

Depends on what you mean by "completely turning off key checking".
Accepting every key disables the acceptance policy, but using the
key to verify package integrity still has value imho, compared to just
using a package with no checks whatsoever.

73 de Jeff