Follow-up Comment #5, sr #109567 (project administration): > The other way is to download the .sig file from a trusted place (the master server, not a mirror)
But why the master server is a trusted place? should its CA be trusted?
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/support/?109567>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
