3.3.0~bpo40+2 is now installed but the problem still occurs. Here is an example transcript:
$ sudo apt-get update ... Reading package lists... Done W: GPG error: http://debcache etch/volatile Release: The following signatures were invalid: BADSIG EC61E0B0BBE55AB3 Debian-Volatile Archive Automatic Signing Key (4.0/etch) $ $ wget --no-cache http://ftp.nz.debian.org/debian-volatile/dists/etch/volatile/Release.gpg -O /dev/null $ sudo apt-get update ... Reading package lists... Done $ (i.e. there was no problem on the second invocation of "apt-get update" - after the in-line proxy has had its copy refreshed) This was the packet capture for the "apt-get update": T 121.72.242.153:38377 -> 202.7.6.9:80 [AP] GET /debian-volatile/dists/etch/volatile/Release.gpg HTTP/1.1..User-Agent: curl/7.15.5 (i486-pc-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8c zlib/1.2.3 libidn/0.6.5..H ost: ftp.nz.debian.org..Accept: */*..If-Modified-Since: Fri, 07 Nov 2008 15:36:10 GMT.... # T 202.7.6.9:80 -> 121.72.242.153:38377 [AP] HTTP/1.1 304 Not Modified..Date: Fri, 07 Nov 2008 22:58:43 GMT..Server: Apache/1.3.34 (Debian)..Last-Modified: Fri, 07 Nov 2008 15:36:10 GMT..ETag: "10633e-bd-4914 606a"..Accept-Ranges: bytes..Content-Type: text/plain; charset=iso-8859-1..Via: 1.1 bc3..Connection: Keep-Alive..Age: 558.... ..and this was the capture for the "wget" command: T 121.72.242.153:55592 -> 202.7.6.9:80 [AP] GET /debian-volatile/dists/etch/volatile/Release.gpg HTTP/1.0..Pragma: no-cache..User-Agent: Wget/1.10.2..Accept: */*..Host: ftp.nz.debian.org..Connection: Keep-Al ive.... ## T 202.7.6.9:80 -> 121.72.242.153:55592 [AP] HTTP/1.1 200 OK..Date: Sat, 08 Nov 2008 03:46:22 GMT..Server: Apache/1.3.34 (Debian)..Last-Modified: Sat, 08 Nov 2008 02:06:11 GMT..ETag: "1062ca-bd-4914f413"..Acc ept-Ranges: bytes..Content-Type: text/plain; charset=iso-8859-1..Via: 1.1 bc3..Content-Length: 189..Connection: Keep-Alive..Age: 0....-----BEGIN PGP SIGNATURE----- .Version: GnuPG v1.4.6 (GNU/Linux)..iD8DBQBJFPQT7GHgsLvlWrMRAlsCAJ9t4j3zyA1bd/3BbJ6Fa1RD73KyCQCghFn5.+RgwY8CnmsHlCweRDJQnB7E=.=bdqA.-----END PGP SIGNATURE-----. Notice how curl uses no "Pragma: no-cache" header and is told that the remote file has not been changed yet when wget issues the same request to the same server moments later (but -using- a "Pragma: no-cache" header) it is given the latest contents of the file. Thanks,