3 ms·
> Which is what Apt has done for 20+ years - packages are gpg-signed, developers sign with their individual keys AFAICT,debian packages themselves are not sign
by shock 6y ago
> Which is what Apt has done for 20+ years - packages are gpg-signed, developers sign with their individual keys
AFAICT,debian packages themselves are not signed, just the repository release files are gpg-signed.