Sam Varshavchik wrote:
There's no technical reason why an rpm file cannot include the URL of any repositories that provide packages any needed dependencies, together with the repositories' keys.
That sort of defeats the purpose of having keys unless you are prepared to trust anyone potentially downstream in such a cascading arrangement.
It would also add many more points that can change and make updates even less repeatable than they are now.
-- Les Mikesell lesmikesell@xxxxxxxxx
