Debian
apt package

  1. Bug #1013681
  2. Comment #7

Comment 7 for bug 1013681

Revision history for this message
Colin Watson (cjwatson) wrote :

I'm fine with the signed-keyring-file approach too, although I haven't confirmed that there are no attacks possible on the code used to verify *that* signature.