Re: Facilitating external repositories
On Thu, Jul 23, 2015 at 01:03:15PM +0100, Ian Jackson wrote:
> Wouter Verhelst writes ("Re: Facilitating external repositories"):
> > - It may be GPG-signed by one or more keys. Apt should have a way of
> > configuring GPG keys that may be allowed to sign sources.list files,
> > preloaded with the set of keys in the Debian keyring. This will allow
> > system administrators in large environments to specify their own set
> > of keys allowed to sign repositories, as well as allowing downstreams
> > to add its own ways of trusting repositories.
>
> The /name/ of the external repository should also be covered by the
> signature.
What would you describe as the "name" of the repository?
The URL is already part of the sources.list file. Additionally, the deb822 form
of the sources.list file is already configured to have a short and long
Description: field.
Am I missing something?
--
It is easy to love a country that is famous for chocolate and beer
-- Barack Obama, speaking in Brussels, Belgium, 2014-03-26
Reply to: