Re: Official Debian digital 'branding' of debs
>>"Nicolás" == Nicolás Lichtmaier <firstname.lastname@example.org> writes:
Nicolás> But there IS a single point of failure. All solutions you
Nicolás> can image will have that. If you have developers sign
Nicolás> packages with their own keys, you'll need a mean to
Nicolás> `authorize' developers, in the form of a Debian signature to
Nicolás> the developers' signature.
Not true. The presence of the developers keys in the
debian-keyring package should be enough, as long as you have a secure
keyring. Having a detatched signature on the keyring made by the
master key is your security.
Old age is too high a price to pay for maturity.
Manoj Srivastava <email@example.com> <http://www.debian.org/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E