Feature #10234

Pin each APT source to its own OpenPGP key

Added by intrigeri 2015-09-23 03:31:04 . Updated 2020-05-05 08:34:48 .

Status:
Confirmed
Priority:
Low
Assignee:
Category:
Target version:
Start date:
2015-09-23
Due date:
% Done:

0%

Feature Branch:
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

This is made possible by APT 1.1, that should be in Debian Stretch. It’s probably not a 3.0 release blocker.

Subtasks

Related issues

Blocked by Tails - Bug #10289: Tails based on Debian Stretch Resolved 2015-09-27
Blocks Tails - Feature #17510: Allow persisting apt's keyring and 3rd party repos Confirmed

History

#1 Updated by intrigeri 2016-01-17 02:21:38

  • Subject changed from Pin each 3rd party APT source to its own OpenPGP key to Pin each APT source to its own OpenPGP key

(Pinning just 3rd party repos does not prevent anyone who controls their key to pretend they’re ftp.us.d.o, assuming they can do MitM.)

#2 Updated by intrigeri 2016-08-02 03:55:36

  • Priority changed from Normal to Low

(Not a release blocker for 3.0.)

#3 Updated by intrigeri 2016-08-28 03:47:34

  • blocked by Bug #10289: Tails based on Debian Stretch added

#4 Updated by intrigeri 2016-08-28 03:47:58

  • Priority changed from Low to Normal
  • Target version deleted (Tails_3.0)

#5 Updated by intrigeri 2017-06-05 15:20:18

  • Assignee deleted (intrigeri)

#6 Updated by Anonymous 2017-06-27 13:57:35

  • Priority changed from Normal to Low

Anybody interested in looking into this?

#7 Updated by muri 2017-06-27 20:45:16

  • Assignee set to muri

u wrote:
> Anybody interested in looking into this?

i’ll have a look

#8 Updated by sajolida 2020-03-20 02:01:05

  • blocks Feature #17510: Allow persisting apt's keyring and 3rd party repos added

#9 Updated by muri 2020-05-05 08:34:48

  • Assignee deleted (muri)

> i’ll have a look

turns out I don’t have the time resources for that