jlebon added a new comment to an issue you are following:
``
Hmm, but then we'd be allowing e.g. F28 content to be signed by the F27 key, right?
That seems like the opposite effect of what we want from rotating keys.
OTOH, I appreciate the UX annoyance here. Maybe we should just teach `gpgkeypath` to
support `$releasever` and `$basearch`, like dnf? Then `rpm-ostree rebase` should Just Work
assuming the newer keys are already part of the installed `fedora-gpg-keys`.
``
To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/461