Re: tl26 pretest start

Hi

> I get your point.  Nonetheless, could signify be an option worth
> considering?  The system adopted by OpenBSD consists of providing the
> public keys that will be used for the next two releases in each
> release.

And how is guaranteed that those keys are not tampered with? What kind
of check is done on the authenticity of the keys?

Assume a evil mirror changing the key, the files, whatever. signify
whould be more than happy with those files. But gpg would show that
the key is not signed by anyone, in particular not by Karl or me.

> I raise this question because when one installs TeX Live, the script
> asks whether to reuse the settings from the previous
> installation. (When there is one.)

There are surely ways to improve but I don't see how signify (which I
checked, too!) is actually improving on the situation.

Best regards

Norbert

--
DI Dr Norbert Preining                        https://www.preining.info
arXiv / Cornell University   +   IFMGA Guide   +   TU Wien  +  TeX Live
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13