Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: [email protected], [email protected]

InRelease support dates back to 2011. While it is true that apt is still falling back to Release.gpg, I think it's time to retire the file. As I am working on more signature transparency it also means less signatures to care about.

This is to kickstart the conversation. I am happy to provide stats from sampled Fastly logs if needed. I am also not sure if there are any tools that require Release.gpg, but also any failure of fetching InRelease would cause a fallback fetch. And I think it is about time that these tools migrate.

Kind regards and thanks
Philipp Kern

Reply via email to