Bug#749795: apt: no authentication checks for source packages

[Christoph Anton Mitterer <calestyo@gmail.com>]

On Mon, 2014-06-16 at 09:35 +0200, Michael Vogt wrote: 
> I think for the future we actually should not allow a apt-get update
> of untrusted repos without --allow-unauthenticated  or
> [trusted=no]. But this will probably break some setups so we need to
> be careful and not rush it.

And what about the setups, which assume secure data to be retrieved (as
far as I can see the whole build stack of Debian), which is already
broken now?

Security is much more critical here then things continuing to work... if
someone's setup really depend on not verifying integrity... he will
immediately notice (and can add the flag),... but no one notices if his
security is compromised by MitMs... :-(


So I see not much of a reason to not implement that right away.


Cheers,
Chris.