Bug#1116274: Consider retiring Release.gpg

Philipp Kern <[email protected]>
Newsgroups gmane.linux.debian.apt.devel
Message-ID <add3a1d4-e84d-4807-96d3-ebc9a3a0f9e7__290.839949023791$1758750448$gmane$org@debian.org>
Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: [email protected], [email protected]

InRelease support dates back to 2011. While it is true that apt is still 
falling back to Release.gpg, I think it's time to retire the file. As I 
am working on more signature transparency it also means less signatures 
to care about.

This is to kickstart the conversation. I am happy to provide stats from 
sampled Fastly logs if needed. I am also not sure if there are any tools 
that require Release.gpg, but also any failure of fetching InRelease 
would cause a fallback fetch. And I think it is about time that these 
tools migrate.

Kind regards and thanks
Philipp Kern
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.