On Tue, 02 Mar 2004 23:06:05 +0000 James Ogley <james@usr-local-bin.org> wrote:
that is not acceptable.
Richard was very polite in his response, I'm going to be less so...
Maybe it was not meant to be rude.
Richard and others provide the APT service as a free service to the SuSE community, I think that it is not acceptable to take this sort of attitude, when they would be perfectly free to withdraw the service altogether.
The problem is still there. I don't know how your packages reach the mirrors but if they land on gwdg by FTP with plain text password it is a serious problem. Blame on my ignorance cos I didn't spot it before. I'll have to learn how to sign the few packages I offer through my website as well since just now I've learnt how it may be critical.
Personally, I'm going to look into the issue of signing packages, and making the key available for future use.
Thanks.