On Tue, Jan 05, 2021 at 01:38:48PM -0500, Neal Gompa wrote:
> 
> While having IMA is nice, can we *please* have repodata signing too?

Why? It gets us nothing really... adds complexity and issues.

We would definiltey need to improve dnf's handling of signed repos
before we did at least. 

kevin

Attachment: signature.asc
Description: PGP signature

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to