ESR: Goodbye Fedora
Les Mikesell
lesmikesell at gmail.com
Thu Feb 22 00:20:56 UTC 2007
Sam Varshavchik wrote:
>
> There's no technical reason why an rpm file cannot include the URL of
> any repositories that provide packages any needed dependencies, together
> with the repositories' keys.
That sort of defeats the purpose of having keys unless you are prepared
to trust anyone potentially downstream in such a cascading arrangement.
It would also add many more points that can change and make updates even
less repeatable than they are now.
--
Les Mikesell
lesmikesell at gmail.com
More information about the fedora-list
mailing list