Non-human users of TeX Live

[Zdenek Wagner]

po 6. 5. 2024 v 16:43 odesílatel Norbert Preining <norbert at preining.info>
napsal:

> Hi Ken,
>
> On Mon, 06 May 2024, TeX Live Mailing List wrote:
> > This is about the xz compromise, and in many cases I really don't
> > know how you could verify a key sufficiently (fine for people who
>
> As I wrote, step 1a - personal check of the web of trust, that is
> checking ID documents personally.
> https://www.gnupg.org/gph/en/manual/x334.html
>
> Not that I think that all this would work for TeX world ...
>

Of course, "trust" is generally not a transitive relation. In fact, I have
no means to validate signatures of Linux packages thus I believe that the
official repositories were verified by someone whom I can trust.

>
> Norbert
>


Zdeněk Wagner
https://www.zdenek-wagner.eu/





>
> --
> PREINING Norbert                              https://www.preining.info
> arXiv / Cornell University   +   IFMGA Guide   +   TU Wien  +  TeX Live
> GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://tug.org/pipermail/tex-live/attachments/20240506/e7072fda/attachment.htm>