hello list, testing situation. real metal simple hardware. fresh clean 15.2 from usb key/iso. simple install. with ethx being enabled while install, immediately adding/using online repos. having a fresh and up todate 15.2 after frist reboot into this system. then using another usb key/iso with 15.3, booting the real metal hardware with this, selecting upgrade. also with network etx enabled. again using all the offered online update repos and all. still simple system. upgrade from usb key/iso and the online repos. all smooth. all fine. first reboot into this 15.3 upgraded system. firing up yast2, there going into onlineupdates. it automagically refreshed or fetches some repo stuff metadata or whatever, then showing two popup rather tiny windows asking the user to make a decision about pgp keys of online repos and strust and whatnot. has this problem actually never been solved? i had thought when using the final .iso bits from 15.3 and offline upgrading there would be no hassle with importing pgp keys and asking the user for imports and trusts of such keys. how is the normal enduser to come up with a sane decision about these keys and fingerprints being asked for and how to make up if one should trust those values? ty.