top | item 45636453

(no title)

kwk1 | 4 months ago

If you're using a Debian derivative these keys should be in packages distributed with your distro with trust coming from that

discuss

order

SAI_Peregrinus|4 months ago

Since the distro's site was compromised you also have to check that any keys it distributes haven't changed. And that the compromise wasn't done by a legitimate maintainer.

kwk1|4 months ago

The packages in question don't come from the distro's homepage.