Bug#1116274: Consider retiring Release.gpg
Philipp Kern <[email protected]>
| Newsgroups | gmane.linux.debian.apt.devel |
|---|---|
| Message-ID | <add3a1d4-e84d-4807-96d3-ebc9a3a0f9e7__290.839949023791$1758750448$gmane$org@debian.org> |
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: [email protected], [email protected] InRelease support dates back to 2011. While it is true that apt is still falling back to Release.gpg, I think it's time to retire the file. As I am working on more signature transparency it also means less signatures to care about. This is to kickstart the conversation. I am happy to provide stats from sampled Fastly logs if needed. I am also not sure if there are any tools that require Release.gpg, but also any failure of fetching InRelease would cause a fallback fetch. And I think it is about time that these tools migrate. Kind regards and thanks Philipp Kern