https://fedoraproject.org/en/keys and fingerprint verification procedure

[Till Maas]

Hi,

on https://fedoraproject.org/en/keys it is suggested to import a gpg key to 
verify it's fingerprint:

| If you want to verify that the keys installed on your system match the keys
| listed here, you can import the key into GnuPG's keyring and check that the
| fingerprint of the key matches. For example:  
| 
| $ gpg --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora
[...]
|$ gpg --fingerprint fedora at redhat.com

Imho it is better to run:
$ gpg --with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora
pub  1024D/4F2A6FD2 2003-10-27 Fedora Project <fedora at redhat.com>
      Key fingerprint = CAB4 4B99 6F27 744E 8612  7CDF B442 69D0 4F2A 6FD2
sub  1024g/FB939E34 2003-10-27

This will output all necessary data without the need to import the package.

Regards,
Till
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 827 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/fedora-websites-list/attachments/20081001/6d829992/attachment.sig>