
7 Dec
2010
7 Dec
'10
10:04 p.m.
Brandon S Allbery KF8NH
IMO, mirroring is orthogonal to that, too.
Only if you consider security a minor or non-issue.
What I mean is that you can mirror a repository regardless of whether packages are signed or not.
I'm tempted to say anyone who believes that on the modern Internet is at best naïve.
It's not obvious to me that adding a mirror makes the infrastructure more more insecure. Any particular concerns? (I hope I qualify as naïve here :-) -k -- If I haven't seen further, it is by standing in the footprints of giants