Re: Mirror problems?

[Eduard Bloch <edi@gmx.de>]

#include <hallo.h>
* Paul Wise [Tue, Mar 15 2011, 08:58:47AM]:

> What was the reason for adding InRelease anyway?

I guess (repeating: *guess*) the main reason is that GPG signature needs
to be verified for the exact file contents. If you put them into two
files then you have a certain window where they are inconsistent. And
stupid HTTP proxies can be very helpful with keeping that shitty
temporary state persistent and with delivering it straight to the end
user.

So, inline signed files are basically a good idea. What is not so good:
that the new feature is poorly documented. It stayed below the radar for
many people for months/years.

Regards,
Eduard.

PS: and... yeah, this time you won't send me a idontlikeyourcourtesycopy
reminder...