Hi Sebastian, I don't really know what would be needed to get LP to sign the keys. They don't currently get stored on LP at all. Currently the key is being sent over https, and the latest httplib2 does verify the server certificate, so we're pretty sure it does come from the sofware-center-agent server, would this cover the vector you're concerned about?
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/833945 Title: Allow to install system wide license keys To manage notifications about this bug go to: https://bugs.launchpad.net/software-center-agent/+bug/833945/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
