Package: debian-ports-archive-keyring
Version: 2016.02.01
Severity: wishlist

Hi!
Currently, debian-ports archive keys are changed yearly, with very little
forward time.  For example, the 2016 key was generated on 25 Jan 2016 and
started being used somewhere before Feb 1.

This is bad for at least two reasons:
* systems that aren't updated daily (especially likely for chroots or
  containers) are prone to losing the migration
* it's impossible to debootstrap from a stable host without fetching
  they key out of band

Thus, could you please generate and publish a bunch of future keys?
Preferably enough to last the lifetime of stable.  You can then store
the secret keys in some safe place, fetching them only when the rollover
time comes.

Reply via email to