Project

General

Profile

Feature #10234

Pin each APT source to its own OpenPGP key

Added by intrigeri over 4 years ago. Updated almost 3 years ago.

Status:
Confirmed
Priority:
Low
Assignee:
Category:
-
Target version:
-
Start date:
09/23/2015
Due date:
% Done:

0%

Feature Branch:
Type of work:
Code
Blueprint:
Starter:
Affected tool:

Description

This is made possible by APT 1.1, that should be in Debian Stretch. It's probably not a 3.0 release blocker.


Related issues

Blocked by Tails - Bug #10289: Tails based on Debian Stretch Resolved 09/27/2015
Blocks Tails - Feature #17510: Allow persisting apt's keyring and 3rd party repos Confirmed

History

#1 Updated by intrigeri about 4 years ago

  • Subject changed from Pin each 3rd party APT source to its own OpenPGP key to Pin each APT source to its own OpenPGP key

(Pinning just 3rd party repos does not prevent anyone who controls their key to pretend they're ftp.us.d.o, assuming they can do MitM.)

#2 Updated by intrigeri over 3 years ago

  • Priority changed from Normal to Low

(Not a release blocker for 3.0.)

#3 Updated by intrigeri over 3 years ago

  • Blocked by Bug #10289: Tails based on Debian Stretch added

#4 Updated by intrigeri over 3 years ago

  • Priority changed from Low to Normal
  • Target version deleted (Tails_3.0)

#5 Updated by intrigeri almost 3 years ago

  • Assignee deleted (intrigeri)

#6 Updated by Anonymous almost 3 years ago

  • Priority changed from Normal to Low

Anybody interested in looking into this?

#7 Updated by muri almost 3 years ago

  • Assignee set to muri

u wrote:

Anybody interested in looking into this?

i'll have a look

#8 Updated by sajolida 16 days ago

  • Blocks Feature #17510: Allow persisting apt's keyring and 3rd party repos added

Also available in: Atom PDF