Re: release/repo file - more stuff

On Fri, Nov 14, 2003 at 12:04:34PM -0500, Jeff Johnson wrote:

> There's more to key distribution than just listing a URI. What is needed
> first is some thought on why anyone should trust the URI encoded in
> metadata XML.

That trust would be based on the key itself, either through signatures from
third parties, or explicit trust by the user, and does not need to be
represented in the metadata.  However, being able to locate the key using
the metadata could be useful.

-- 
 - mdz