avoid gpg-dependency?
We only need it to understand which key was used to sign the data. Is gpgv sufficient? gpg is not installed by default on minimal systems.
We only need it to understand which key was used to sign the data. Is gpgv sufficient? gpg is not installed by default on minimal systems.