News for hackers. Stuff that matters.

A comment on An exposed apt signing key and how to improve apt security.

Re:An exposed apt signing key and how to improve apt security by yoursunny on Wednesday December 15, 2021 @05:18PM (#29572314)
I run a small apt repository without signing, delivered over HTTPS only. Then I tell users to put `trusted=yes` in the source line. There's no APT signing key, no risk of compromise, and no need to backup.
[ Parent | on HN ]

There are no comments on this comment yet.