Bug#944102: create sources.list with signed-by

[Osamu Aoki <osamu@debian.org>]

Hi,

I think this proposal to use "signed-by" is a good idea.

But if you ever make such support, please consider to use deb822 style file
instead of one-line old style.

This way, we can avoid creating a source list configuration file with insanely
long line can be avoided.  (I don't know which key is the best choice though.)

My local /etc/apt/sources.list.d/debian.sources


  types: deb deb-src
  uris: http://deb.debian.org/debian/
  suites: bookworm
  components: main non-free-firmware contrib non-free
  signed-by: /usr/share/keyrings/debian-archive-bookworm-automatic.gpg
  #Signed-By: /usr/share/keyrings/debian-archive-bookworm-stable.gpg
  #Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
  
  types: deb deb-src
  uris: http://security.debian.org/debian-security/
  suites: bookworm-security   
  components: main non-free-firmware contrib non-free
  signed-by: /usr/share/keyrings/debian-archive-bookworm-security-automatic.gpg
  #Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg


Osamu