Commit 3612e42c authored by Michael Orlov's avatar Michael Orlov

Added a comment about not overriding GnuPG keyservers.

parent 55942424
......@@ -42,6 +42,9 @@ Implement a `-k` / `--get-keys` option for importing all Gentoo Release Media
page in order to retrieve the keys from the key server using GnuPG (`gpg`)
Don't specify a keyserver as done in the referenced page — let GnuPG decide
on this matter.
The key firgerprints of imported keys must be verified against both the
fingerprints listed on the website (mandatory), and against hardcoded values in the
script (verbose warning to user if there is a mismatch).
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment