runasand/ubuntu-grsec — pull request #4 by eviljoel (2014-09-17 03:10:24+00:00)
Title: Fingerprint Verification is Still Necessary

There was a previous commit where the full fingerprint is specified when retrieving a key from a key server. Presumably this was done to avoid the need for manual fingerprint verification. Unfortunately, GPG does not do any verification that the actual key received matches the key ID requested. (I setup a fake keyserver and tested it.) The only way to verify the correct key was downloaded is with manual fingerprint verification.

I changed the instructions to add manual fingerprint verification.