On Tue, Jan 5, 2021 at 6:59 PM Neal Gompa <ngompa13(a)gmail.com> wrote:
On Tue, Jan 5, 2021 at 1:51 PM Kevin Fenzi <kevin(a)scrye.com> wrote:
>
> On Tue, Jan 05, 2021 at 01:38:48PM -0500, Neal Gompa wrote:
> >
> > While having IMA is nice, can we *please* have repodata signing too?
>
> Why? It gets us nothing really... adds complexity and issues.
>
And IMA has the same problem. IMA is worse because it's so poorly
understood that I doubt anyone knows how to even use it.
Well that's one of the things we're aiming to do here is to improve
the tools and the process and the documentation.