Re: Why Does Debian Use PGP to Sign Packages

--000000000000708a4b063c77ed41
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 16, 2025 at 12:45=E2=80=AFAM <[email protected]> wrote:

> Hello All,
>
> In an earlier post I asked why Debian uses PGP to sign packages despite
> its complexity.
>
> Some responded that Sequoia PGP simplifies the process.
>
> I now wish to ask why Debian uses PGP in general to sign packages when
> there are alternatives such as SigStore.
>
> What were the unique benefits in PGP that could not be found in other
> alternatives?
>
> I thank all in advance for any responses.
>

Also see <
https://www.debian.org/doc/manuals/securing-debian-manual/deb-pack-sign.en.=
html
>.

Jeff

--000000000000708a4b063c77ed41
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote g=
mail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Sat, Aug 16,=
 2025 at 12:45=E2=80=AFAM &lt;<a href=3D"mailto:[email protected]">fosres@po=
steo.de</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"=
margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-lef=
t:1ex">Hello All,<br>
<br>
In an earlier post I asked why Debian uses PGP to sign packages despite <br=
>
its complexity.<br>
<br>
Some responded that Sequoia PGP simplifies the process.<br>
<br>
I now wish to ask why Debian uses PGP in general to sign packages when <br>
there are alternatives such as SigStore.<br>
<br>
What were the unique benefits in PGP that could not be found in other <br>
alternatives?<br>
<br>
I thank all in advance for any responses.<br></blockquote><div><br></div><d=
iv>Also see &lt;<a href=3D"https://www.debian.org/doc/manuals/securing-debi=
an-manual/deb-pack-sign.en.html">https://www.debian.org/doc/manuals/securin=
g-debian-manual/deb-pack-sign.en.html</a>&gt;.</div><div><br></div><div>Jef=
f=C2=A0</div></div></div>

--000000000000708a4b063c77ed41--