Bug#203741: apt-secure
On Mon, Sep 22, 2003 at 10:05:45AM -0400, Isaac Jones wrote:
> > I don't think we can even think about defaulting to rejecting insecure
> > sources until we've provided some simple tools for importing keys into the
> > trusted keyring and generating Release files.
>
> (Rest of email is below.)
>
> Like I said, I'm not actually advocating that, but the migration path
> is still a good idea for this release.
What is the migration path that you are suggesting? That we check
signatures where they are available, and where they are not, warn the user
during apt-get update? I suppose this is better than nothing.
> I'm just writing to ask what your plan is. Can I help with anything?
My current plan is to get apt > 0.5.4 into testing. I don't want to start
breaking things until there is something pretty solid for sarge.
Unfortunately, glibc and gcc-3.3 happened, and so that has held everything
up. apt also just had an RC bug reported which I need to fix. :-/
--
- mdz
Reply to: