[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#763419: snapshot.debian.org: add an overlay for updates to Valid-Until, OpenPGP signatures



Package: snapshot.debian.org
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org

On Sun, Sep 28, 2014 at 4:34 AM, Peter Palfrader wrote:
> On Fri, 26 Sep 2014, Paul Wise wrote:
>
>> On Thu, Sep 25, 2014 at 11:21 PM, Christoph Anton Mitterer wrote:
>>
>> > Well I think snapshot is it's own construction site, isn't it?
>>
>> snapshot is a read-only (modulo cosmic rays and removal of
>> non-redistributable things) historical record, files in it will not be
>> modified to re-sign with newer keys nor to update Valid-Until.
>
> That doesn't mean one couldn't consider providing an overlay of sorts,
> that provides re-signed release files if the original ones verified.
> Under a different path obviously.  We could look at patches if they
> somehow appeared.

Excellent idea, documenting it in the bug tracker.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: