https://bugzilla.redhat.com/show_bug.cgi?id=1778530 --- Comment #4 from Gary Buhrmaster <gary.buhrmaster@xxxxxxxxx> --- (In reply to Daiki Ueno from comment #3) > I was referring to the Yubico's release page, where .sig is also provided: > https://developers.yubico.com/libfido2/Releases/ Thanks for the pointer. I had not been aware that yubico had started releasing on their corporate site with signatures (they initially only released on github, and they still do release there, but without and sigs). I'll work to revise the sources/spec files to pull the sources from yubico corporate site and validate the signing from there. Thanks. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx