On Thu, 27 Mar 2008, Robert Millan wrote:
> I think debian-keyring and gnupg would fit better in Recommends than in
> Suggests.  dpkg-source can't work securely without them.

This is a strong assertion... dpkg-source checks signatures but it's only
an informational step. It will never fail due to a problem with the GPG
signature. 

Thus I don't think that Recommends are really needed. 

There are other bugs asking to make it stricter in that regard (see
#440841 and #390282 for instance).

Cheers,
-- 
Raphaël Hertzog

Le best-seller français mis à jour pour Debian Etch :
http://www.ouaza.com/livre/admin-debian/


Reply via email to