Hi Sebastian,

I don't really know what would be needed to get LP to sign the keys.  They 
don't currently get stored on LP at all.
Currently the key is being sent over https, and the latest httplib2 does verify 
the server certificate, so we're pretty sure it does come from the 
sofware-center-agent server, would this cover the vector you're concerned about?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/833945

Title:
  Allow to install system wide license keys

To manage notifications about this bug go to:
https://bugs.launchpad.net/software-center-agent/+bug/833945/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to