Project

General

Profile

Feature #10234

Pin each APT source to its own OpenPGP key

Added by intrigeri almost 4 years ago. Updated about 2 years ago.

Status:
Confirmed
Priority:
Low
Assignee:
Category:
-
Target version:
-
Start date:
09/23/2015
Due date:
% Done:

0%

Feature Branch:
Type of work:
Code
Blueprint:
Starter:
Affected tool:

Description

This is made possible by APT 1.1, that should be in Debian Stretch. It's probably not a 3.0 release blocker.


Related issues

Blocked by Tails - Bug #10289: Tails based on Debian Stretch Resolved 09/27/2015

History

#1 Updated by intrigeri over 3 years ago

  • Subject changed from Pin each 3rd party APT source to its own OpenPGP key to Pin each APT source to its own OpenPGP key

(Pinning just 3rd party repos does not prevent anyone who controls their key to pretend they're ftp.us.d.o, assuming they can do MitM.)

#2 Updated by intrigeri about 3 years ago

  • Priority changed from Normal to Low

(Not a release blocker for 3.0.)

#3 Updated by intrigeri about 3 years ago

  • Blocked by Bug #10289: Tails based on Debian Stretch added

#4 Updated by intrigeri about 3 years ago

  • Priority changed from Low to Normal
  • Target version deleted (Tails_3.0)

#5 Updated by intrigeri over 2 years ago

  • Assignee deleted (intrigeri)

#6 Updated by u about 2 years ago

  • Priority changed from Normal to Low

Anybody interested in looking into this?

#7 Updated by muri about 2 years ago

  • Assignee set to muri

u wrote:

Anybody interested in looking into this?

i'll have a look

Also available in: Atom PDF