this post was submitted on 06 Apr 2024
11 points (92.3% liked)

Arch Linux

7624 readers
1 users here now

The beloved lightweight distro

founded 4 years ago
MODERATORS
 

I was creating a new key for pass when I noticed a random expired GPG key assigned to a certain "Roderick van Domburg" in my list of keys. I don't know any Rodericks, and this laptop has been whipped clean.

Should I be concerned? How could this even happen???

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 3 points 5 months ago* (last edited 5 months ago) (1 children)

Did you install anything from the AUR? roderickvd is the librespot guy, so if you installed that from the AUR it would load his keys

[โ€“] [email protected] 3 points 5 months ago* (last edited 5 months ago)

And the keyring was originally designed to hold all kinds of (public, not private) keys other then one's own to build out the web of trust, so the intended mode of operation was to have other public keys in there. In practice, I think that most people just have their own keys, though.

Never quite reached the dream of a distributed, verified network.