James Troup wrote: > The canonical source for the debian keyring _is_[2] kerying.debian.org > (via anon-rsync); period. The package is a convenience, nothing > more[3]. A package which is horribly outdated is everything but a "convenience".