Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse

[Didier 'OdyX' Raboud <odyx@debian.org>]

Le lundi, 7 août 2017, 09.40:22 h EDT Russ Allbery a écrit :
> Daniel Kahn Gillmor <dkg@fifthhorseman.net> writes:
> > debian-policy should encourage verification of upstream cryptographic
> > signatures.

Yes.

> diff --git a/policy.xml b/policy.xml
> index 6086901..c14d9b4 100644
> --- a/policy.xml
> +++ b/policy.xml
> @@ -2556,11 +2556,28 @@ endif</programlisting>
> 
>        <para>
>          This is an optional, recommended configuration file for the
> -        <literal>uscan</literal> utility which defines how to
> +        <command>uscan</command> utility which defines how to
>          automatically scan ftp or http sites for newly available updates
>          of the package.  This is used Debian QA tools to help with quality

While were at patching this, this sentence should read:
> This is used _by_ Debian QA tools …
or
> This is used _by some_ Debian QA tools…

Other than that, seconded!

Cheers,
    OdyX