News for hackers. Stuff that matters.
Re:An exposed apt signing key and how to improve apt security by gurrone on Friday December 17, 2021 @02:54PM (#29597540)
Also an interesting option is using deb822 sources.list format and inline the key https://lists.debian.org/debian-devel/2021/11/msg00026.html

Still a bit ugly depending on the point of view you take but a 3rd party vendor can just tell the user to download this file and store it in /etc/apt/sources.list.d/ which should make that whole thing a bit more frictionless.

There are no comments on this comment yet.