Bug#207400: An RPM port of APT
On Wed, 2003-08-27 at 15:15, Gustavo Niemeyer wrote:
> I've just read "How it works" in the URL you mentioned. That's exactly
> how our system works.
The high level is the same, but the implementation details are not.
Mainly we have a metaIndex object which itself queues the index files
for download once it's done and verified. This came out of a lot of
discussion with Jason. Also the fingerprint checking is a bit more
abstracted. And there's other things too that I don't recall offhand.
> They have even mentioned to be using a "small
> part" of our code in the "Authors" section (besides that which was
> *already* merged in APT, I belive).
Yeah. We took your gpg method, and turned it into a gpgv method, since
using root's keyring doesn't seem like a good idea to me.
There were other smallish cleanups and fixes associated with this.