Hi, On 11/10/25 6:51 AM, Simon Josefsson wrote:
Yes -- that should be fixed. From a specification/policy point of view, I think what should be done is simple: forget about Release+Release.gpg as obsolete, and only use InRelease files. What to sign is the YAML content with all lines ending with EOL.
Is there a need for a file format that supports hierarchical structures, or would deb822 work better?
Simon