[Rpm-maint] [rpm-software-management/rpm] Document differences between internal and Sequoia GPG backends (Issue #2346)

[Panu Matilainen]

Another one for the list: 
* the internal parser doesn't verify sub-packet binding signatures (notably user id).

Note that I wouldn't go too deep into these technicalities in the INSTALL blurb, just something broad that helps a person decide against using the internal parser :laughing: But I agree, having a list will help make a point.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2346#issuecomment-1380097347
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2346/1380097347 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230112/cd66d708/attachment.html>