[Security-Discuss] Missing/Wrong gpg Keys

Hi,

I'm new to this list, because of:

The updated packages *qt3*3.2.3-19.5.100mdk  for 10.0 are signed by 
"Mandrake Linux KDE Team <kde-7Aj/b8uzpy6AmYF/[email protected]>" Key ID dd684d7a26752624
but I don't find the public key.

Why isn't there a webfrontend to the MDK-Keyserver?
Exist a MDK-keyserver? URL?

Is there a recommended list of gpg-keys that should be installed?
Autoupdate with urpmi stopps for ever, if a key is missing! So,
security Updates will not be installed. Example:

kerberos update isn't installed with: "urpmi --auto-select --auto" because 
of
/var/cache/urpmi/rpms/libqt3-3.2.3-19.5.100mdk.i586.rpm: Invalid signature 
((SHA1) DSA sha1 md5 gpg GPG#22458a98 NOT OK)

So, this is really a PROBLEM!

I suggest:
Publish a list of gpg-Keys and do NOT allow packages in 
Mandrakelinux/official/updates signed with other keys.


Subscribing to this list may also be a problem, because the 
"mandrakesecure.net" link on the bottom 
of http://archives.mandrakelinux.com/ is dead!

mfg,jh

In case of mail-probs (Anti-SPAM-conf) mail to jholm-e4sNDE6/[email protected]

----------------- IT Physik / Universitaet Goettingen ------------------
  _______________________   ________.--'-`--._____  Tel:  +49 551 399363
|____==================_)  \_'===================` FAX:  +49 551 399263
        _,--___.-|__|-.______|=====/  `---'         Post: Dr. J. A. Holm
        `---------._          ~~~~~|                      Friedrich-Hund-Platz 1
                    `-._ -  -  - ,'                       37077 Goettingen
                        \_____,-'                         Deutschland
         PGP-Key:  http://www.Theorie.Physik.Uni-Goe.de/jh.html
                         "Tee. Earl Grey. Heiss!"

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________