Quoting Philippe Cerfon (philcerf@gmail.com): > Package: general > Severity: wishlist > Tags: security > > Hi. > > I think Debian has the following two problems (or rather its security > conscious users) with respect to software that gets into the system: No idea whether what you're proposing is relevant or not....but there's something I'm deeply sure of : that won't be solved through a "general" bug report. Such vague bug reports are usually either quickly closed....or just ignored by everybody in the project. Discussing infrastructure changes like what you're proposing (which I have no advice about) should usually be done through our mailing lists, get some kind of agreement, include some implementation in key packages, and get enough consensus among developers to draw the needed changes in the infranstructure (in this case, our software repositories, at minimum). So, zero chances that this happens through a (soon to be forgotten) bug report. No offense, but that's reality.
Attachment:
signature.asc
Description: PGP signature