[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Mirror problems?

On 2011-03-15, Peter Palfrader <weasel@debian.org> wrote:
> Apt would then accept either version.
> Of course this only makes sense for unstable which updates regularly.
> For security we might consider doing it also, but re-issue a new
> InRelease a few hours after the first mirror pulse that gets rid of the
> old checksums.
> For stable we probably wouldn't do that as the key to sign stuff is kept
> offline, AIUI, so it becomes impractical.

stable doesn't use InRelease because AFAIK it can't handle two signatures in a
sane way and because it's not overly useful given that Release and Release.gpg
only update every one to two months.

Kind regards
Philipp Kern

Reply to: