On Mon, 2006-01-16 at 19:36 -0500, Joey Hess wrote: > Steve downgraded this bug from RC to normal, but the fact is that > installing debsig-verify does seem to break the whole package > management system, at least when that system is used with the existing > Debian archive. Is there a reason not to consider this RC? Is there a > reason why shipping debsig-verify in stable/testing adds any benefit > over excluding it from those distributions? Note that there is nothing > in the package description to warn what its effects will be when > installed.
I think the bug is aimed at the wrong package. Nothing debsig-verify does can fix this. If we don't have the infrastructure, then apt/dpkg/whatever need to not use the feature by default. Assuming someone wants to use this feature, one would assume they are setting up their own package infrastructure, and one would assume that they also are doing a lot to configure this. Enabling apt/dpkg to use it is minor compared to the rest of the work. Why is it enabled by default? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]