Re: [arch-general] pacman security when importing new keys?

Hi Manuel, thanks for posting this thread. I also wondered about the key from eworm. Sure he is a trusted user but accepting keys made me a little bit nervous. Is there a way to verify my pacman keys? Dennis Am 09.02.2015 um 22:00 schrieb Manuel Reimer:

Hello,

today, pacman asked me to import a new signature key. So far this was done "automatically" using a keys-package, which, itself, was signed with a trusted key.

How is the new mechanism secured? Is the new way, to bring keys to users, prone to MITM attacks?

Thanks in advance.

Manuel