Michael Gilbert wrote: > There is no need to worry about additional load on the mirrors since > the only thing that needs to be verifiable are the checksums > themselves, and that could easily be hosted on a centralized https > server separate from the mirror system.
The Debian CDs and the Archive Signing keys can be found at keyring.d.o Additionally, the archive signing key can be found at: https://ftp-master.debian.org/keys.html Cheers, -- Raphael Geissert - Debian Developer www.debian.org - get.debian.net -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/ihinpd$nti$1...@dough.gmane.org
