Bug#1116274: Consider retiring Release.gpg
Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: debian-release@lists.debian.org, deity@lists.debian.org
InRelease support dates back to 2011. While it is true that apt is still
falling back to Release.gpg, I think it's time to retire the file. As I
am working on more signature transparency it also means less signatures
to care about.
This is to kickstart the conversation. I am happy to provide stats from
sampled Fastly logs if needed. I am also not sure if there are any tools
that require Release.gpg, but also any failure of fetching InRelease
would cause a fallback fetch. And I think it is about time that these
tools migrate.
Kind regards and thanks
Philipp Kern
Reply to: