[Rpm-maint] [rpm-software-management/rpm] Cannot import a GPG key with signatures (#1306)

[KOLANICH]

@DemiMari, is there any reason to use your lib instead of sequoia?

>We can always detect at compile-time if the Rust library is available, and fall back to the built-in parser if it is not.

In runtime. By creating an abstraction layer, detecting the available libs and then prioritizing more secure OpenPGP impls over less secure. I have something like that for python (but curently it doesn't prioritize).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1306#issuecomment-751317806
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20201225/1e5b1226/attachment.html>