[Bug 1919339] Re: streams should be gpg signed & gpg verified

2021-09-07 Thread Alberto Donato
Marking this invalid for maas. As per Adam's comment MAAS streams (stable, candidate, daily) are GPG signed. ** Changed in: maas Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchp

[Bug 1919339] Re: streams should be gpg signed & gpg verified

2021-03-16 Thread MichaƂ Sawicz
We in Multipass are following LXD's suit, they've decided against GPG for cross-platform and key revocation reasons. Streams are accessed via HTTPS, the assumption being that as long as your HTTPS connection to the host is good verified, the streams are considered trusted. -- You received this b

[Bug 1919339] Re: streams should be gpg signed & gpg verified

2021-03-16 Thread Adam Collard
https://images.maas.io/ephemeral-v3/stable/streams/v1/ The MAAS image stream is signed? ** Changed in: maas Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1919339 Tit