If the RedHat guys can validate their authenticity, run with them...or, if
you're comfortable enough with the fact that they came from RedHat's site,
then run with them.

On Wed, 7 Mar 2001, Ted Gervais wrote:

> On Wednesday 07 March 2001 08:35, you wrote:
> > GPG signatures are used to ensure the authenticity of the package, that it
> > came from who it was supposed to.
> >
> > I'd be a little wary of the packages, unless someone from RedHat can
> > confirm their authenticity for you.
> >
>
> Oh?  That seems to make sense. But these files are from the RedHat Update
> site?  Now what?
>
>
> > On Wed, 7 Mar 2001, Ted Gervais wrote:
> >
> > >
> > > Question -
> > >
> > > I was trying to use up2date this morning and found that on all the
> packages
> > > it said:
> > >
> > > 'this package .....not signed with a GPG signature. Continue?
> > >
> > > What does that mean?  Is that a problem??
> > >
> > >
> >
> >
> >
> > _______________________________________________
> > Redhat-list mailing list
> > [EMAIL PROTECTED]
> > https://listman.redhat.com/mailman/listinfo/redhat-list
> >
> >
> >
> >
>
>



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to