Bug#856408: apt: Signed-By does nothing

[micah anderson <micah@debian.org>]

Julian Andres Klode <jak@debian.org> writes:

>> deb http://deb.leap.se/debian sid main Signed-By: 2f483BbCE87BEE2F7DFE99661E34A1828E203901
>
> That's invalid syntax. It should look like these:
>
>     deb [signed-by=BBEBDCB318AD50EC6865090613B00F1FD2C19886] http://repository.spotify.com stable non-free

Thanks, I totally missed the format details in the man page before!

>     deb [signed-by=/usr/share/keyrings/debian-archive-keyring.gpg target-=Contents-deb] http://deb.debian.org/debian/ experimental main contrib non-free

I'm very curious about this "target-=Contents-deb" option. I see the
section in sources.list(5) saying that this is an option to indicate
what download targets apt will try to acquire from this source. My
understanding is that the -= means that this modifies the default value
to remove the given value so it wont be acquired.

However, I don't quite get what this configuration is intended to do,
why would you indicate that you do not want to download the Contents-deb
files. Would you do that just to speed up apt updates?

thanks!
micah