[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dpkg-sig support wanted?

* Hamish Moffatt [Fri, 25 Nov 2005 20:34:02 +1100]:

> On Wed, Nov 23, 2005 at 05:34:41PM +0100, Jeroen van Wolffelaar wrote:
> > In the archive, 525 out of 283283 .deb's are dpkg-sig'd (0.19%). There
> > are 8 distinct keys used for those 525 .deb's, seven of which correspond
> > to DD's[1].

> Slightly off the topic, but does this mean the archive contains .debs
> not build by Debian developers? Shouldn't sponsors be recompiling
> packages from non-DDs before upload?

  I was suspicious too, but it was later checked on irc that all keys
  actually belonged to a DD. (One of them was not in public keyservers,
  AIUI, and Jeroen assumed it was not a DD, or something similar.)


Adeodato Simó                                     dato at net.com.org.es
Debian Developer                                  adeodato at debian.org
A lie can go round the world before the truth has got its boots on.
                -- Terry Pratchett

Reply to: