Re: tl26 pretest start

> Of course.  I liked the idea that one can read such a key over a phone
> call, which is definitely not possible with a gpg key! ;)

Who has ever done that?

> IMHO, given the number of installations around the world, almost noone
> does!

How do you know?

> Actually, I just took the liberty to jump into the discussion because
> it so happens that for the very modest TL for OpenBSD that I maintain,
> I had just this morning abandoned gpg in favor of... signify!
> 
> And precisely because almost no one checks, gpg made installation very
> complicated.  In fact, just by glancing at the diff, you can see that
> it's much simpler with signify, even for myself!
> 
> https://git.sr.ht/~ralessi/texlive-openbsd/commit/bb05960

Sorry, no. Nothing has changed. You actually **added** one line to
download the public key per verification.
The rest is jus shortening the "not verified" message.

So this is not at all a good case for signify. Nothing becomes simpler,
you only use a different command (signify instead of gpg) and in
**addition** download the public key.

Please explain me what is simpler with this approach?

Best regards

Norbert

--
DI Dr Norbert Preining                        https://www.preining.info
arXiv / Cornell University   +   IFMGA Guide   +   TU Wien  +  TeX Live
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13