[Gllug] Signitures on debs

Nix nix at esperi.demon.co.uk
Wed Aug 7 22:27:00 UTC 2002


On Tue, 6 Aug 2002, Thom May moaned:
> Debs themselves are not signed

Well, they *could* be. debsigs and debsig-verify are there for a
reason...

> repository itself to sign the Release files, so you can ensure that the
> mirror is not trojaned.
> http://www.advogato.org/person/ajt/diary.html?start=12
> (AJ is debian release manager ;-) )

I think he's offered the crown to anyone else mad enough to take it
now Woody's out. I don't know if anyone has *been* that mad.

-- 
`There's something satisfying about killing JWZ over and over again.'
                                        -- 1i, personal communication

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list