Hi all,
During last week's meeting I agreed to bring this up (sorry for the delay).
KB asked "do we care and how much, if at all, that the key used to sign the content is the real distro key?" (Because at the outset, it's going to be more difficult to use the distro key for Atomic host.)
IMO, we don't so long as we have a SIG key that is publicized. I don't see any reason it has to be the main CentOS / distro key.
Any objections/thoughts/comments?
Thanks,
jzb