Jeroen van Wolffelaar <[EMAIL PROTECTED]> writes:
> On Thu, Sep 07, 2006 at 10:33:46AM -0700, Debian Bug Tracking System wrote:
>> This is an automatic notification regarding your Bug report
>> #291403: Please don't run gpg by default,
>> which was filed against the debmirror package.
>>
>> It has been closed by Goswin von Brederlow <[EMAIL PROTECTED]>.
>
> [...]
>
>> some time ago you raised an objection to debmirror always running gpg
>> to verify the archive. Since I still believe it is the right[tm] thing
>> to do and there have been no other users complaining about the issue I
>> am now closing this bug.
>>
>> As stated there are ways to make the gpg check secure which I believe
>> was your main objective (a false sense of security) so hopefully I'm
>> not just ignoring your opinion.
>
> I didn't change opinion here, but it's not my call to make, it's yours.
> You're obviously not ignoring my opinion, don't worry, as you've clearly
> carefully considered it.
>
> Thank you for your diligence in dealing with bugreports,
> --Jeroen
As a side note I fixed another wishlist bugreport to make
--ignore-release-gpg more ignoring. Instead of ignoring gpg errors it
now doesn't even try to verify Release.gpg. If you set that option in
your debmirror.conf you have the desired effect. It just isn't
default.
MfG
Goswin
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
