On Tue, Jul 17, 2001 at 02:01:05PM +0300, Richard Braakman wrote: > On Tue, Jul 17, 2001 at 12:06:39PM +1000, Anthony Towns wrote: > > The sponsor is, as far as Debian is concerned. S/He's the one we trust to > > ensure that upload doesn't contain trojans, and the one we can actually > > identify if we have any need to. > > Unfortunately... we can't. As far as I can tell, the sponsor's name is > only in the .changes file, which we (still?) throw away after installing > the packages. Isn't the sponsor's key on the .dsc file as well? - Jimmy Kaplowitz jimmy@debian.org
Attachment:
pgpL5LLB3N04b.pgp
Description: PGP signature