Source: dhcpcd
Version: 1:10.1.0-8
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Right now, resolvconf is the first Suggests for dhcpcd-base, followed by
openresolv. But I recently saw https://bugs.debian.org/860564
("openresolv is less crippled than debian-resolvconf for
security-focused configurations") in which Jason A. Donenfeld said this:

  Debian has its own "resolvconf" which is vastly inferior and makes it
  impossible to securely set up DNS servers for ephemeral secure tunnel
  interfaces.

  Therefore, I'd suggest that either:
  a) Debian switch to using Openresolv by default instead of its own
  "resolvconf"
  ...

So it seems like a good idea to have ``openresolv`` as first suggestion.
That is has the same upstream maintainer/developer may be useful too.

While researching all this, I also found commit 11bbf768f579
("Add wpasupplicant to Recommends for dhcpcd-base for SSID profiles")
(it's now on ``dhcpcd``)

I'm not entirely sure what "SSID profiles" are, but if it is meant to
store credentials for multiple wireless networks, that's a functionality
that the ``iwd`` package/program also supports.
If I 'guessed' "SSID profiles" correctly, maybe add ``iwd`` as an
alternative Recommends?

Cheers,
  Diederik

- -- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.21-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQT1sUPBYsyGmi4usy/XblvOeH7bbgUCZ/LQmAAKCRDXblvOeH7b
boatAQDE8fDCZtFdeF39s+gklnyRpiaNM/10/70EFeHZltn5MgD/WtsR4mLurlBl
+6Is6fH1qHf4CQXhjFcsM/UsxoHPPgs=
=adyN
-----END PGP SIGNATURE-----

Reply via email to