https://bugzilla.suse.com/show_bug.cgi?id=1184326 https://bugzilla.suse.com/show_bug.cgi?id=1184326#c59 --- Comment #59 from Michal Suchanek --- Why is the key fingerprint used for key verification rather than the same hash as the other files? Clearly the fingerprint function provides a shorter hash than the SHA256 so it is likely weaker. It is meant to simplify key management of user keys, not to securely identify a key. -- You are receiving this mail because: You are on the CC list for the bug.