debian repository keys

[532910]

It's better to put .asc or .gpg file into `/etc/apt/trusted.gpg.d``` like

sudo wget -O /etc/apt/trusted.gpg.d/syncthing.asc https://syncthing.net/release-key.txt

instead of apt-key add

curl -s https://syncthing.net/release-key.txt | sudo apt-key add -

man APT-KEY(8):

Note: Instead of using this command a keyring should be placed directly in the /etc/apt/trusted.gpg.d/ directory with a descriptive name and either "gpg" or "asc" as file extension.

[532910]

Any update?

[532910]

https://manpages.debian.org/stretch/apt/apt-key.8.en.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895855

https://wiki.debian.org/DebianRepository/UseThirdParty recommends not putting things in /etc/apt/trusted.gpg.d, as that causes apt to cause that key to be trusted to sign all repositories.

[calmh]

Please feel free to file a fix. The repo is here: https://github.com/syncthing/apt-web

[532910]

syncthing/apt-web#19