[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Trustworthiness of unaccounted Debian packages



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Dec 16, 2003 at 02:43:59PM +0100, Lukas Ruf wrote:
> what is the trustworthiness generally expected from packages that are
> not in the main-line of the Debian distribution?

Do you know and trust the person who created and is distributing the
packages?  No?  Then none whatsoever.  Yes?  Then as much as you trust
that person.

> For example, packages that I find on <people.debian.org> and packages
> found elsewhere?

Go with the one on p.d.o.

- -- 
 .''`.     Paul Johnson <baloo@ursine.ca>
: :'  :    
`. `'`     proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/4SMOUzgNqloQMwcRAjFRAKChZzP107l9AvTt3unGeDpiaEE5fwCgwUWU
IhtL1OSKw66lIrKdH5q5ZOA=
=qEOH
-----END PGP SIGNATURE-----



Reply to: