Re: pkgsrc signature verification?

[Jaromír Doleček <jaromir.dolecek%gmail.com@localhost>]

Le mer. 26 août 2020 à 19:15, 6E7368 <6E7368%protonmail.com@localhost> a écrit :
> Thanks again Greg. Out of curiosity, what's the rational for not including the keyring with the installation media?

Missing infrastructure.

The bulk packages uploaded to ftp.netbsd.org are not actually signed
and hence there is no list of approved signatures. Also actually the
signed package file has a different format than the non-signed one, so
every package would need to be uploaded twice if we were to officially
support the signed packages.

It would be very good to fix this.

Jaromir