Paul Wise writes: > On Mon, Nov 4, 2019 at 4:52 AM Guillem Jover <guil...@debian.org> wrote: > >> The official archive-keyring packages that use these, I think it's mostly >> for backwards compatibility reasons. > > I wonder if it is feasible to and how the debian-archive-keyring could > migrate from /etc/apt/trusted.gpg.d/ to /usr/share/keyrings/ + > signed-by. Right now it ships keyrings in both places.
I would recommend against doing this as long as sources.list is a configuration file: it would need regular updates to change to the new signing key. That doesn't work out of the box. Ansgar