Sat, Apr 21
This can be done using the keyfile option.
I cannot reproduce the bug described in the first posting, so I'm closing this as resolved. Feel free to reopen this task if I've overlooked something.
By the way, OBS has an unfortunate tendency to get stuck when a lot of build jobs exist - such as right now. Maybe that issue is fixed in a newer OBS version as well?
Thanks for the detailed report. I'm working on getting this fixed.
Fri, Apr 20
Unfortunately it doesn't. I agree that using HTTPS should mitigate the MitM risk, but I still have to explicitly mark the repository as trusted for APT to accept it.