On Wed, 2003-08-27 at 15:15, Gustavo Niemeyer wrote: > I've just read "How it works" in the URL you mentioned. That's exactly > how our system works.
The high level is the same, but the implementation details are not. Mainly we have a metaIndex object which itself queues the index files for download once it's done and verified. This came out of a lot of discussion with Jason. Also the fingerprint checking is a bit more abstracted. And there's other things too that I don't recall offhand. > They have even mentioned to be using a "small > part" of our code in the "Authors" section (besides that which was > *already* merged in APT, I belive). Yeah. We took your gpg method, and turned it into a gpgv method, since using root's keyring doesn't seem like a good idea to me. There were other smallish cleanups and fixes associated with this.
