[Rpm-maint] [rpm-software-management/rpm] Cannot import a GPG key with signatures (#1306)

[Demi Marie Obenour]

@Conan-Kudo good point on optional dependencies.

That said, if we are going to make Lua mandatory, could we use it for the PGP packet parser?  Lua is de-facto memory safe, so the risk of nasty security vulnerabilities is far lower, and performance should not matter for this application.  And since it is always available, we don’t need a fallback path.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1306#issuecomment-755654843
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210106/965f922b/attachment.html>