diff --git a/content/guides/flatpak.md b/content/guides/flatpak.md index a1aa3294caf98d1a9450c20347582ebd3064f2ec..a06b3dbf1cf41167858ab95dd4645e279d18813a 100644 --- a/content/guides/flatpak.md +++ b/content/guides/flatpak.md @@ -112,7 +112,12 @@ either the public key directly, or a file containing the public key: which at least one can be used to verify signatures for this repository Multiple `--sign-verify` occurrences are allowed in order to specify as many -public keys as needed. +public keys as needed. This can be useful when a new signature key is being +deployed, while the old one is still in use: by specifying both the old and the +new key, users can make sure at least one of those will be able to verify the +signatures. That way, once the old key is revoked and only the new one is used +for signing the repository, the corresponding remote will keep working as +expected. This option can also be added when using the `flatpak remote-modify` command.