I recently started using SimplyMepis (latest, V 6.1 I think), and am really impressed. However, when I use Synaptic to add software I always get a warning that the packages can't be authenticated. I searched on this and found a thread on the mepis lovers forum about it. In general they don't seem too worried about it, and it sounds like this is not a "bug", but that the distro doesn't use authentication. However, there are are pointers and a link to a debian article showing how to manually add the keys yourself.

I'm very tempted to not worry any further about this since I am only using the repositories that were activated by default. Am I wearing rose colored glasses here?

Hi,

these keys are there for a reason:
It is to make sure that your Synaptic / Updater Software only installs known good software.
This also means that you are using an authenticated repository and that the signature is still valid.

If you chosse to ignore these warnings there is a slight chance that you get forged installtion packages.

As allways, it is your choise.
Importing the keys, may seem a litle bit difficult, but is sure is the best way.



Fundamental Thruth in IT:
"Fast, easy, secure.
Choose any two out of three."


Happy Hacking

Huibert

Thanks Huibert

You have convinced me. I'll spend some time on this over the weekend.