Re: [PATCH v3 3/3] dak.conf: add packages that trigger byhand-code-sign

[Joerg Jaspert <joerg@debian.org>]

On 14519 March 1977, Ben Hutchings wrote:
>> The first is acceptable, the latter is not, for hopefully obvious reasons.
> I meant the latter.  Your reason for objecting is not obvious to me.  I
> understand that this can't be done for the main archive and all its
> mirrors, which is fine - this is only important for emabrgoed security
> updates.

We offer the archives, including security, by rsync too.
And that should stay. Mirrors of security do exist, for good reasons.[1]

Why does it need to be in the archive?


[1] Yes, they are not recommended to users. And if you have access to
the net, don't use them. Use our infrastructure.
But there are enough places where direct net connections simply are not
available, and where a mirror is the only thing you can reach. Loads of
company networks, for example.

And so for all practical purposes there is no difference between main
and security archive in terms of access to files in their archive, or
trying to limit a directory using apache access rules.

-- 
bye, Joerg