Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #271075

Re: General questions

From 타토카 <cybertatoka@gmail.com>
Newsgroups linux.debian.user
Subject Re: General questions
Date 2024-07-11 14:30 +0200
Message-ID <IZ15T-1mFL-1@gated-at.bofh.it> (permalink)
References (6 earlier) <IY5Oh-MFO-1@gated-at.bofh.it> <IYNFE-1dMg-21@gated-at.bofh.it> <IYOBH-1euu-1@gated-at.bofh.it> <IZ0tb-1mc8-1@gated-at.bofh.it> <IZ0CR-1mgp-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Ok, I think this is really enough for verification ( Maybe (^_^) ).
But, what do you mean: "Because you haven't established a chain of trust
from yourself to any of the signatures."
Is it only for Debian developers? And is it very important?

On Thu, Jul 11, 2024 at 4:58 PM Greg Wooledge <greg@wooledge.org> wrote:

> On Thu, Jul 11, 2024 at 16:47:45 +0500, 타토카 wrote:
> > Why 64 signatures not checked and no ultimately trusted keys found here:
> > $ gpg --import key-DA87E80D6294BE9B.txt
> > gpg: key DA87E80D6294BE9B: 64 signatures not checked due to missing keys
> > gpg: key DA87E80D6294BE9B: public key "Debian CD signing key
> > <debian-cd@lists.debian.org>" imported
> > gpg: Total number processed: 1
> > gpg:               imported: 1
> > gpg: no ultimately trusted keys found
> >
> > And this:
> > gpg: WARNING: This key is not certified with a trusted signature!
> > gpg:          There is no indication that the signature belongs to the
> > owner.
>
> Because you haven't established a chain of trust from yourself to any
> of the signatures.
>
> You've downloaded this key from the Internet.  And it's signed by 64
> other keys.  That's all you know.  You have no idea whether any of those
> 64 signing keys are trustworthy.
>
> At some point, you have to say "This is good enough."  And then you move
> on with your life, either installing Debian from the image that you have,
> or not.
>
> You've already done far more verification than most people do.
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: General questions "Thomas Schmitt" <scdbackup@gmx.net> - 2024-07-08 20:10 +0200
  Re: General questions 타토카 <cybertatoka@gmail.com> - 2024-07-08 21:20 +0200
    Re: General questions Andy Smith <andy@strugglers.net> - 2024-07-08 23:30 +0200
      Re: General questions gene heskett <gheskett@shentel.net> - 2024-07-09 00:10 +0200
        Re: General questions "Andrew M.A. Cater" <amacater@einval.com> - 2024-07-09 01:10 +0200
          Re: General questions gene heskett <gheskett@shentel.net> - 2024-07-09 01:20 +0200
            Re: General questions 타토카 <cybertatoka@gmail.com> - 2024-07-11 00:10 +0200
              Re: General questions Lee <ler762@gmail.com> - 2024-07-11 01:10 +0200
                Re: General questions 타토카 <cybertatoka@gmail.com> - 2024-07-11 13:50 +0200
                Re: General questions 타토카 <cybertatoka@gmail.com> - 2024-07-11 14:00 +0200
                Re: General questions Franco Martelli <martellif67@gmail.com> - 2024-07-11 21:30 +0200
                Re: General questions Lee <ler762@gmail.com> - 2024-07-11 22:00 +0200
                Re: General questions Greg Wooledge <greg@wooledge.org> - 2024-07-11 14:00 +0200
                Re: General questions 타토카 <cybertatoka@gmail.com> - 2024-07-11 14:30 +0200
                Re: General questions "Thomas Schmitt" <scdbackup@gmx.net> - 2024-07-11 14:40 +0200
                Re: General questions Greg Wooledge <greg@wooledge.org> - 2024-07-11 14:40 +0200
                Re: General questions Dan Purgert <dan@djph.net> - 2024-07-11 15:50 +0200

csiph-web