-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/07/08 13:20, Luk Claes wrote:
> Peter Jordan wrote:
>> Luk Claes, 04/07/08 20:05:
>>
>>> Peter Jordan wrote:
>>>> Hi,
>>> Hi
>>>
>>>> why are the keyrings of debian-multimedia.org and debian backports not
>>>> in the official repository of debian?
>>>>
>>>> At the moment you have to install untrusted keyrings before you can use
>>>> these repositories.
>>> Because they are no official Debian services (yet?).
>>>
>> but the repositories does not need to be official debian services, only
>> the keyrings should be available over the official debian repository.
>
> No, as that would imply that they are or at least will be official
> Debian services and open the door for every archive provider to ask for
> adding their key...

Governments need silly all-encompassing rule sets to appear fair.
Debian doesn't. IOW, adding debian-multimedia-keyring and
debian-backports-keyring doesn't mean that you've got to add every
other unofficial archive keyring, even though that archive's owner
screams "that's not fair!".

- --
Ron Johnson, Jr.
Jefferson LA USA

We want... a Shrubbery!!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+m6SS9HxQb37XmcRAlAyAJsEpZ7lo5n93H/zv+0ed8AB372SCQCg4J+b
3ViyXLNWSesIRcBSA0AtZ0E=
=xs1z
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/07/08 13:53, William Pitcock wrote:
> Hi,
>
> On Mon, 2008-04-07 at 19:57 +0200, Peter Jordan wrote:
>> Hi,
>>
>> why are the keyrings of debian-multimedia.org and debian backports not
>> in the official repository of debian?
>>
>> At the moment you have to install untrusted keyrings before you can use
>> these repositories.
>
> Because they are third party repositories and not affiliated in any
> official way with the Debian project.

But these two repositories are very popular with users. A firm,
unambiguous disclaimer in the package's long description should be
adequate.

- --
Ron Johnson, Jr.
Jefferson LA USA

We want... a Shrubbery!!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+m70S9HxQb37XmcRAgQrAKCITFv/IibuTTtjBBw3BvimIqpHLwCggn7u
AH/wpg/+1MvgXYkrzcGjhUU=
=y+xL
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Ron Johnson wrote:
> On 04/07/08 13:20, Luk Claes wrote:
>> Peter Jordan wrote:
>>> Luk Claes, 04/07/08 20:05:
>>>
>>>> Peter Jordan wrote:
>>>>> Hi,
>>>> Hi
>>>>
>>>>> why are the keyrings of debian-multimedia.org and debian backports not
>>>>> in the official repository of debian?
>>>>>
>>>>> At the moment you have to install untrusted keyrings before you can use
>>>>> these repositories.
>>>> Because they are no official Debian services (yet?).
>>>>
>>> but the repositories does not need to be official debian services, only
>>> the keyrings should be available over the official debian repository.
>> No, as that would imply that they are or at least will be official
>> Debian services and open the door for every archive provider to ask for
>> adding their key...
>
> Governments need silly all-encompassing rule sets to appear fair.
> Debian doesn't. IOW, adding debian-multimedia-keyring and
> debian-backports-keyring doesn't mean that you've got to add every
> other unofficial archive keyring, even though that archive's owner
> screams "that's not fair!".

Indeed, so we don't need to add these neither even though you scream
it's unfair :-)

There has to be a line somewhere and the current line makes sense to
everyone, so I don't need we will change it...

Cheers

Luk


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/07/08 15:34, Luk Claes wrote:
> Ron Johnson wrote:
>> On 04/07/08 13:20, Luk Claes wrote:
>>> Peter Jordan wrote:
>>>> Luk Claes, 04/07/08 20:05:
>>>>
>>>>> Peter Jordan wrote:
>>>>>> Hi,
>>>>> Hi
>>>>>
>>>>>> why are the keyrings of debian-multimedia.org and debian backports not
>>>>>> in the official repository of debian?
>>>>>>
>>>>>> At the moment you have to install untrusted keyrings before you can use
>>>>>> these repositories.
>>>>> Because they are no official Debian services (yet?).
>>>>>
>>>> but the repositories does not need to be official debian services, only
>>>> the keyrings should be available over the official debian repository.
>>> No, as that would imply that they are or at least will be official
>>> Debian services and open the door for every archive provider to ask for
>>> adding their key...
>> Governments need silly all-encompassing rule sets to appear fair.
>> Debian doesn't. IOW, adding debian-multimedia-keyring and
>> debian-backports-keyring doesn't mean that you've got to add every
>> other unofficial archive keyring, even though that archive's owner
>> screams "that's not fair!".
> Indeed, so we don't need to add these neither even though you scream
> it's unfair :-)

Actually, OP and I are not screaming that not add the 2 keyring
packages is unfair.

> There has to be a line somewhere and the current line makes sense to
> everyone, so I don't need we will change it...

As is your prerogative...

- --
Ron Johnson, Jr.
Jefferson LA USA

We want... a Shrubbery!!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+sFrS9HxQb37XmcRArDCAJ0XboaceDYoLxknkV0ZmH x8JYXujACfQRKs
H1FY+0KuHGQvVGs3ScG6ukY=
=bLSm
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Ron Johnson <ron.l.johnson@cox.net> writes:

>> Because they are third party repositories and not affiliated in any
>> official way with the Debian project.
>
> But these two repositories are very popular with users.

Which doesn't make them official. Better spend your time helping those
projects with becoming official!

--
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Hi,

On Monday 07 April 2008 19:57, Peter Jordan wrote:
> why are the keyrings of debian-multimedia.org and debian backports not
> in the official repository of debian?

I guess this was answered already in this thread :-)

> At the moment you have to install untrusted keyrings before you can use
> these repositories.

No need to do this without a trust path at all, it just needs five easy and
documented steps to add those keys with a trust path, for the backports
archive see:
http://wiki.debian.org/DebianEdu/Documentation/Etch/HowTo/Administration#head-136bb7e75e07e8b6463e6b30761ac51776c5c27d

That said, I would appreciate debian-backports-archive-keyring package in
Debian main, just like there is a debian-edu-archive-keyring.

I wouldn't want a debian-multimedia-archive-keyring package in Debian (main),
as this archive doesnt promise to comply to the DFSG as the other three
archives do. Contrib would probably fine.

ITPs anyone?


regards,
Holger