 |
Hello. Thank you for the report. Unfortunately we do not fully understand the nature of this bug report. Like in a previous bug report that we closed, we noted that the build systems are different and thus our key management components are also different. The legacy system has the 8 key, the new system has the 9 key, and the way they operate are radically different from one another. Cross signing was not part of the design; initial designs were for signing RPM packages, and that's it. I do not believe our upstreams CentOS, Red Hat, nor Fedora do any sort of cross certification of their keys between major versions, and unfortunately, we do not see the benefit of this. I would encourage joining one of our discussion mediums such as our forums (forums.rockylinux.org) or mattermost and starting a conversation if you'd like to engage with us and the community about your ideas/thoughts. |
- Anonymous
