| 2 Dec 2021 |
 Yad | minimal: True. ^^ | 20:29:48 |
|  Betal joined the room. | 20:32:21 |
 jochensp | Yad: well your trust chain includes downloading the key from the keyserver, probably over a secure protocol signed with other keys you got from somewhere and so on, all the gnupg does not know and thus issues the warning | 20:34:59 |
| jochensp | s/all the/all that/ | 20:36:49 |
| jochensp | Yad: but then again the question is where does trust start. Do you trust the certificates in your browser or those in the operating system? Do you trust your computer hardware? | 20:38:37 |
| Yad | Indeed, I was already typing: jochensp: ah right, so it's me trusting the HTTPS root certificates probably? (Since that's how I get the fingerprint of the GPG certificate) | 20:39:19 |
| jochensp | yes | 20:39:31 |
| jochensp | you can tell gnupg about that to remove the warning | 20:39:51 |
| Yad | jochensp: Where does trust start? As the security expert Steve Gibson likes to say, it's never truly trust-no-one unless you pick up sand off the beach yourself. (To smelt into silicon wafers, and so on.) | 20:40:02 |
| jochensp | yeah :D | 20:40:15 |
| Yad | ^^b | 20:40:19 |
| Yad left the room. | 20:48:49 |
| Yad joined the room. | 20:51:20 |
| Yad left the room. | 20:53:46 |
| Yad joined the room. | 20:55:08 |
| Yad left the room. | 20:55:53 |
| Yad joined the room. | 20:57:32 |
| Yad left the room. | 20:57:52 |
| Yad joined the room. | 21:00:49 |
| Yad | jochensp: My mindfulness about validating the signature of F-Droid is based on, for example, how I managed to avoid the 2016 Linux Mint hack because I get my ISOs from their official BitTorrent torrent, rather than relying on a webserver. https://blog.linuxmint.com/?p=2994 | 21:08:46 |
| jochensp | Yad: nice, I didn't download isos for a long time, just package with apt :) | 21:12:34 |
|  jess left the room. | 21:16:40 |
|  ravi left the room. | 21:21:00 |
| ravi joined the room. | 21:21:17 |
|  Unsupported User joined the room. | 21:22:02 |
|  Brainstorm left the room. | 21:34:33 |
|  Guest7411 (IRC) joined the room. | 21:34:34 |
| Guest7411 (IRC) left the room. | 21:34:34 |
|  @oftc-irc:matrix.orgchanged room power levels. | 21:34:35 |
| Brainstorm joined the room. | 21:34:43 |
