X-Git-Url: https://git.saurik.com/apt.git/blobdiff_plain/259d88d94843fbce7c8100f8b337b7b8fb58b840..766761fd836d9e247daea924809965c21cc65dc7:/doc/apt-key.8.xml?ds=inline diff --git a/doc/apt-key.8.xml b/doc/apt-key.8.xml index 5dbbaaf26..b5319efa3 100644 --- a/doc/apt-key.8.xml +++ b/doc/apt-key.8.xml @@ -1,15 +1,9 @@ -%aptent; - - -%aptverbatiment; - - -%aptvendor; + %aptent; + %aptverbatiment; + %aptvendor; ]> @@ -19,7 +13,7 @@ &apt-email; &apt-product; - 2012-06-09T00:00:00Z + 2015-10-15T00:00:00Z @@ -54,7 +48,11 @@ &synopsis-param-filename; or if the filename is - from standard input. - + + It is critical that keys added manually via apt-key are + verified to belong to the owner of the repositories they claim to be for + otherwise the &apt-secure; infrastructure is completely undermined. + @@ -116,10 +114,11 @@ - - Pass advanced options to gpg. With adv --recv-key you can download the - public key. - + Pass advanced options to gpg. With adv --recv-key you + can e.g. download key from keyservers directly into the the trusted set of + keys. Note that there are no checks performed, so it is + easy to completely undermine the &apt-secure; infrastructure if used without + care.