Hacker News new | ask | show | jobs
by planede 880 days ago
The thing to be checked are the installed GPG keys that are trusted for package signing.