Comment 10 for bug 125103

Revision history for this message
Reinhard Tartler (siretart) wrote : Re: [Bug 125103] Re: ppa archives are not signed

Jani Monoses <email address hidden> writes:

> 1) regarding interactivity, if apt-get install is passed --force-yes it
> will not ask for confirmation

That disables all security checks and disables the whole point
authentification. This is not an option in many (if not most) use cases.

> 2) can the user-only (non team) archives be signed with the LP users
> key? Existing ubuntu devs already have these in LP. For users of the
> archive this would be the same as existing 3rd party repos all over the
> net.

Only the public keys are in LP, not the private ones.

I'd imagine autogenerated keys per team/user by launchpad would be far
easier to implement.

--
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4