ESR: Goodbye Fedora

Les Mikesell lesmikesell at gmail.com
Thu Feb 22 00:20:56 UTC 2007


Sam Varshavchik wrote:
> 
> There's no technical reason why an rpm file cannot include the URL of 
> any repositories that provide packages any needed dependencies, together 
> with the repositories' keys. 

That sort of defeats the purpose of having keys unless you are prepared 
to trust anyone potentially downstream in such a cascading arrangement.

It would also add many more points that can change and make updates even 
less repeatable than they are now.

-- 
   Les Mikesell
    lesmikesell at gmail.com





More information about the fedora-list mailing list