3 ms·
> Does Debian already provide signature on .deb files Signing files is 90's security. Yes, of course in 2026 it is still perfectly capable of proving a file h
by traceroute66 3mo ago
> Does Debian already provide signature on .deb files
Signing files is 90's security.
Yes, of course in 2026 it is still perfectly capable of proving a file has not been tampered with.
The problem is that is insufficient in 2026.
See the "Goals to protect against specific attacks" section[1] of TUF (The Update Framework) spec to give you an idea of modern attack vectors.
[1] https://theupdateframework.github.io/specification/v1.0.33/#goals-to-protect-against-specific-attacks https://theupdateframework.github.io/specification/v1.0.33/#...