walters added a new comment to an issue you are following:
``
Note that if this is done, it adds *another* race condition to updates from clients.
Current Fedora updates are already massively racy because only one RPM version is kept.
But having both `repomd.xml` and `repomd.xml.asc` means two files, which introduces
another race. Debian went through the same issue and recently changed to doing
signatures inline:
http://www.chiark.greenend.org.uk/~cjwatson/blog/no-more-hash-sum-mismatc...
``
To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/133