[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [PATCH 7/7] Work around my laziness wrt. signing the Release file for my repository.



On Mon, Aug 16, 2010 at 08:50:40PM +0200, Andrea Bolognani wrote:
> On Mon, Aug 16, 2010 at 10:48:39AM -0700, Steve Langasek wrote:

> > I object to the aforementioned laziness being propagated to the official d-i
> > builds.  You are overriding a key element of the trust path used to
> > guarantee the integrity of the components being downloaded for assembly of
> > official Debian releases.  This must not be done.

> Jeremy explained in his introductory message that patches 6 and 7
> are not for inclusion. He’s just working around some things until a
> proper solution has been implemented.

Sorry, overlooked this.  But then, there was a risk that some other reviewer
might also overlook this and commit it in error... if the patch wasn't meant
to be committed, better for it not to have been sent to debian-boot IMHO.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek@ubuntu.com                                     vorlon@debian.org

Attachment: signature.asc
Description: Digital signature


Reply to: