[steve1977]

> Before someone says Linux offers GPG signing it's mostly useless without a central PKI

One could also argue that GPG signing is useful exactly because it doesn't rely on a central PKI.

[herecomesthepre]

It's as useful as self-signed certificates.