3 ms·

> GPG signing a Debian package does nothing because package signatures are not verified by default on any major distribution when packages are installed with ap

by lamby 8y ago

> GPG signing a Debian package does nothing because package signatures are not verified by default on any major distribution when packages are installed with apt-get install That's sliiiiiiightly misleading. :/

xenophonf 8y ago
On both Debian 9.4 and Ubuntu 16.04 (what I have handy): # Do not enable debsig-verify by default; since the distribution is not using # embedded signatures, debsig-verify would reject all packages. no-debsig