Re: Bug#862746: unblock: simple-cdd/0.6.5
> Vagrant Cascadian <firstname.lastname@example.org> (2017-05-16):
>> Package: release.debian.org
>> Severity: normal
>> User: email@example.com
>> Usertags: unblock
>> X-Debbugs-Cc: firstname.lastname@example.org, email@example.com
>> Thanks for all your work on the Release Team!
>> Please unblock package simple-cdd
>> With the recent announcement shutting down public FTP services:
>> This requires some significant changes in simple-cdd, as simple-cdd
>> relied on Debian's FTP mirrors for downloading files discovered by FTP
>> directory listing.
>> Now simple-cdd uses http://deb.debian.org/debian/extrafiles, an
>> inline-signed list of checksums for various content in the archive
>> (notably, tools/*, docs/*). This also allows signature and checksum
>> verification of all downloaded files, which is a huge security
> The introduction of this file is indeed great news.
>> No changes were made to the simple-cdd-profiles udeb, so should not
>> have any impact on debian-installer.
> ACK. TBF I was surprised to even get this mail in the first place. ;)
> [Reminds me I really should try simple-cdd one day, but too many birds,
> too little time.]