On Thu, Sep 30, 2004 at 04:18:57PM -0700, TongKe Xue wrote: > Hi all, > > I hav a few questions concerning up2date. > > 1) What is RedHat's GPG key? Up2date said it was going to "install the > key" but didn't say what the key was. The RPM-GPG-KEY is included in the top (root) of the CD images and is also available under the /usr/share/rhn directory > 2) How can I ensure that the packages I download are from > RedHat/Fedora and not spoofed/trojaned? (By the man in middle attack) That is supposedly what the GPG keys do. For rawhide, however, they don't usually sign all the packages. To some extent you have to trust the connections to wherever. If you have a real reason for paranoia you might want to consider buying a distribution rather than downloading it. -- G.Wolfe Woodbury `- -' RHCT U The Line Eater is a boojum!
Attachment:
pgpvd4HTFYklX.pgp
Description: PGP signature
