A vendor's public key changing should arouse suspicion, correct? I know some expire, i dunno is it suspicious?
[8 Points] samwhiskey:
Not suspicious if they sign their new key with their old key. Otherwise, yes
[1 Points] None:
Kind of, but not really. There's no telling really you just have to hope for the best.
Not suspicious if they sign their new key with their old key. Otherwise, yes