[TriLUG] Debian vs Mandrake vs Redhat vs . . .

[Jeremy Portzer]

On Tue, 2003-03-11 at 11:21, Jeremy Portzer wrote:
 
> Note that there is some discussion of a file called vendors.list where
> you put GPG keys. This only applies to the signing of the "Packages.gz"
> file, which lists what packages are in the repository, and not the
> packages themselves.  Since Red Hat doesn't run its own apt repository,
> you can't put the Red Hat public key here.  (If you use the FreshRPM
> repository, you could put Matthias Saou's public key here if you trust
> him.)  I find this feature somewhat limited since it

Oops, forgot to finish my sentence.   "I find this feature somewhat
limited since it doesn't verify the integrity of the packages
themselves."

--Jeremy