Vagrant Cascadian <vagr...@debian.org> (2017-05-16):
> Package: release.debian.org
> Severity: normal
> User: release.debian....@packages.debian.org
> Usertags: unblock
> X-Debbugs-Cc: debian-boot@lists.debian.org, 
> simple-cdd-de...@lists.alioth.debian.org
> 
> Thanks for all your work on the Release Team!
> 
> Please unblock package simple-cdd
> 
> With the recent announcement shutting down public FTP services:
> 
>   https://lists.debian.org/debian-announce/2017/msg00001.html
> 
> This requires some significant changes in simple-cdd, as simple-cdd
> relied on Debian's FTP mirrors for downloading files discovered by FTP
> directory listing.
> 
> Now simple-cdd uses http://deb.debian.org/debian/extrafiles, an
> inline-signed list of checksums for various content in the archive
> (notably, tools/*, docs/*). This also allows signature and checksum
> verification of all downloaded files, which is a huge security
> improvement.

The introduction of this file is indeed great news.

[…]

> No changes were made to the simple-cdd-profiles udeb, so should not
> have any impact on debian-installer.

ACK. TBF I was surprised to even get this mail in the first place. ;)

[Reminds me I really should try simple-cdd one day, but too many birds,
too little time.]


KiBi.

Attachment: signature.asc
Description: Digital signature

Reply via email to