Package: debian-archive-keyring
Version: 2006.01.18
Severity: normal

Hi,

The debian-archive-keyring package also includes the following key:

B5F5BBED: "Debian AMD64 Archive Key <[email protected]>"

amd64 is now an official part of Debian, and there should not be no use
anymore for this unofficial key in the package targetted for etch: the
inclusion of this key is even poses a potential security thread, as it's
one more key enabled by default on all debian systems that could be
compromised.

In the same vain, I do think the 2004 key can also be removed. The 2005
does have some use still as it's the year of Sarge's release and you
could verify sarge sources with it.

Thanks,
--Jeroen

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-686
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages debian-archive-keyring depends on:
ii  gnupg                         1.4.5-1    GNU privacy guard - a free PGP rep

debian-archive-keyring recommends no packages.

-- no debconf information

-- 
Jeroen van Wolffelaar
[EMAIL PROTECTED] (also for Jabber & MSN; ICQ: 33944357)
http://Jeroen.A-Eskwadraat.nl


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to