On Thu, 27 Mar 2008, Robert Millan wrote: > I think debian-keyring and gnupg would fit better in Recommends than in > Suggests. dpkg-source can't work securely without them.
This is a strong assertion... dpkg-source checks signatures but it's only an informational step. It will never fail due to a problem with the GPG signature. Thus I don't think that Recommends are really needed. There are other bugs asking to make it stricter in that regard (see #440841 and #390282 for instance). Cheers, -- Raphaël Hertzog Le best-seller français mis à jour pour Debian Etch : http://www.ouaza.com/livre/admin-debian/

