Re: Debian or Redhat 7???
It may get too heavy to not mirror the security update packages.
Why don't we put signature verification into apt and dpkg and mirror
And perhaps have a tool that checks a bunch of known mirrors for
discrepencies in the keyring packages ?
And have a single URL, location aware, load balancing server ? :)
(I know we've been through this before. I just had a brainwave and
wanted to see if anyone was interested in doing the above. Sorry for the
lack of realism, but not for the extra zeal)
Tal Danzig wrote:
There are no mirrors of security.debian.org (or shouldn't be)
for security reasons.
This way the authenticity of security packages can be better controlled.