Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-08 Thread Reinhard Tartler
Ron Johnson [EMAIL PROTECTED] writes:

 Because they are third party repositories and not affiliated in any
 official way with the Debian project.

 But these two repositories are very popular with users.

Which doesn't make them official. Better spend your time helping those
projects with becoming official!

-- 
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-08 Thread Holger Levsen
Hi,

On Monday 07 April 2008 19:57, Peter Jordan wrote:
 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

I guess this was answered already in this thread :-)

 At the moment you have to install untrusted keyrings before you can use
  these repositories.

No need to do this without a trust path at all, it just needs five easy and 
documented steps to add those keys with a trust path, for the backports 
archive see:
http://wiki.debian.org/DebianEdu/Documentation/Etch/HowTo/Administration#head-136bb7e75e07e8b6463e6b30761ac51776c5c27d

That said, I would appreciate debian-backports-archive-keyring package in 
Debian main, just like there is a debian-edu-archive-keyring. 

I wouldn't want a debian-multimedia-archive-keyring package in Debian (main), 
as this archive doesnt promise to comply to the DFSG as the other three  
archives do. Contrib would probably fine.

ITPs anyone?


regards,
Holger


pgpLE4hCmF2dl.pgp
Description: PGP signature


debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Peter Jordan
Hi,

why are the keyrings of debian-multimedia.org and debian backports not
in the official repository of debian?

At the moment you have to install untrusted keyrings before you can use
 these repositories.

PJ


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Luk Claes
Peter Jordan wrote:
 Hi,

Hi

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?
 
 At the moment you have to install untrusted keyrings before you can use
  these repositories.

Because they are no official Debian services (yet?).

Cheers

Luk


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Peter Jordan
Luk Claes, 04/07/08 20:05:

 Peter Jordan wrote:
 Hi,
 
 Hi
 
 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 
 Because they are no official Debian services (yet?).
 

but the repositories does not need to be official debian services, only
the keyrings should be available over the official debian repository.

PJ


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Luk Claes
Peter Jordan wrote:
 Luk Claes, 04/07/08 20:05:
 
 Peter Jordan wrote:
 Hi,
 Hi

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 Because they are no official Debian services (yet?).

 
 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.

No, as that would imply that they are or at least will be official
Debian services and open the door for every archive provider to ask for
adding their key...

Cheers

Luk


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Leo costela Antunes
Peter Jordan wrote:
 
 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.

That may make some sense, but you do understand that by making them
available they wouldn't be any more official and any more trusted,
right? If we provide them as packages, it may be misunderstood for our
users as a recommendation, at best, which IMHO isn't worth the hassle.
Better to keep the key-adding just as manual as the sources.list editing.

This, of course, from the perspective that there is no official trust
relationship. If there is one that I'm unaware of, then by all means,
file an RFP!

Cheers

-- 
Leo costela Antunes
[insert a witty retort here]



signature.asc
Description: OpenPGP digital signature


Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread James Vega
On Mon, Apr 07, 2008 at 08:14:19PM +0200, Peter Jordan wrote:
 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.

You can get the keys for those sites yourself and add them to the apt
keyring.  Backports.org even gives you explicit instructions on how to
do that.

-- 
James
GPG Key: 1024D/61326D40 2003-09-02 James Vega [EMAIL PROTECTED]


signature.asc
Description: Digital signature


Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread William Pitcock
Hi,

On Mon, 2008-04-07 at 19:57 +0200, Peter Jordan wrote:
 Hi,
 
 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?
 
 At the moment you have to install untrusted keyrings before you can use
  these repositories.

Because they are third party repositories and not affiliated in any
official way with the Debian project.

William


signature.asc
Description: This is a digitally signed message part


Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 04/07/08 13:20, Luk Claes wrote:
 Peter Jordan wrote:
 Luk Claes, 04/07/08 20:05:

 Peter Jordan wrote:
 Hi,
 Hi

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 Because they are no official Debian services (yet?).

 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.
 
 No, as that would imply that they are or at least will be official
 Debian services and open the door for every archive provider to ask for
 adding their key...

Governments need silly all-encompassing rule sets to appear fair.
Debian doesn't.  IOW, adding debian-multimedia-keyring and
debian-backports-keyring doesn't mean that you've got to add every
other unofficial archive keyring, even though that archive's owner
screams that's not fair!.

- --
Ron Johnson, Jr.
Jefferson LA  USA

We want... a Shrubbery!!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+m6SS9HxQb37XmcRAlAyAJsEpZ7lo5n93H/zv+0ed8AB372SCQCg4J+b
3ViyXLNWSesIRcBSA0AtZ0E=
=xs1z
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 04/07/08 13:53, William Pitcock wrote:
 Hi,
 
 On Mon, 2008-04-07 at 19:57 +0200, Peter Jordan wrote:
 Hi,

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 
 Because they are third party repositories and not affiliated in any
 official way with the Debian project.

But these two repositories are very popular with users.  A firm,
unambiguous disclaimer in the package's long description should be
adequate.

- --
Ron Johnson, Jr.
Jefferson LA  USA

We want... a Shrubbery!!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+m70S9HxQb37XmcRAgQrAKCITFv/IibuTTtjBBw3BvimIqpHLwCggn7u
AH/wpg/+1MvgXYkrzcGjhUU=
=y+xL
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Luk Claes
Ron Johnson wrote:
 On 04/07/08 13:20, Luk Claes wrote:
 Peter Jordan wrote:
 Luk Claes, 04/07/08 20:05:

 Peter Jordan wrote:
 Hi,
 Hi

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 Because they are no official Debian services (yet?).

 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.
 No, as that would imply that they are or at least will be official
 Debian services and open the door for every archive provider to ask for
 adding their key...
 
 Governments need silly all-encompassing rule sets to appear fair.
 Debian doesn't.  IOW, adding debian-multimedia-keyring and
 debian-backports-keyring doesn't mean that you've got to add every
 other unofficial archive keyring, even though that archive's owner
 screams that's not fair!.

Indeed, so we don't need to add these neither even though you scream
it's unfair :-)

There has to be a line somewhere and the current line makes sense to
everyone, so I don't need we will change it...

Cheers

Luk


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-multimedia-keyring/debian-backports-keyring in official debian repository?

2008-04-07 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 04/07/08 15:34, Luk Claes wrote:
 Ron Johnson wrote:
 On 04/07/08 13:20, Luk Claes wrote:
 Peter Jordan wrote:
 Luk Claes, 04/07/08 20:05:

 Peter Jordan wrote:
 Hi,
 Hi

 why are the keyrings of debian-multimedia.org and debian backports not
 in the official repository of debian?

 At the moment you have to install untrusted keyrings before you can use
  these repositories.
 Because they are no official Debian services (yet?).

 but the repositories does not need to be official debian services, only
 the keyrings should be available over the official debian repository.
 No, as that would imply that they are or at least will be official
 Debian services and open the door for every archive provider to ask for
 adding their key...
 Governments need silly all-encompassing rule sets to appear fair.
 Debian doesn't.  IOW, adding debian-multimedia-keyring and
 debian-backports-keyring doesn't mean that you've got to add every
 other unofficial archive keyring, even though that archive's owner
 screams that's not fair!.
 Indeed, so we don't need to add these neither even though you scream
 it's unfair :-)

Actually, OP and I are not screaming that not add the 2 keyring
packages is unfair.

 There has to be a line somewhere and the current line makes sense to
 everyone, so I don't need we will change it...

As is your prerogative...

- --
Ron Johnson, Jr.
Jefferson LA  USA

We want... a Shrubbery!!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH+sFrS9HxQb37XmcRArDCAJ0XboaceDYoLxknkV0ZmHx8JYXujACfQRKs
H1FY+0KuHGQvVGs3ScG6ukY=
=bLSm
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]