Here's the basic outline of how I think we should do this: https://wiki.ubuntu.com/SecurityTeam/Specifications/ClickPackageSigning
Once everyone agrees to the approach, I can add details if needed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1330770 Title: click packages rely upon tls for integrity and authenticity To manage notifications about this bug go to: https://bugs.launchpad.net/software-center-agent/+bug/1330770/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs