[arch-dev-public] [RFC] Moving repos to nymeria
jan.steffens at gmail.com
Sun Sep 16 02:34:29 EDT 2012
On Sun, Sep 16, 2012 at 7:59 AM, Gaetan Bisson <bisson at archlinux.org> wrote:
> Do we really need remote signing for the DB, given that each of us
> already downloads the DB when upgrading, most likely several times a
> day? I do not think downloading it a couple more times when pushing
> packages will change much. Then I see no need to trust the server: I
> download the current DB and its signature, check it (it's by Florian P,
> and of course I trust him), apply my changes, sign and upload back.
I want avoid anything that requires me to upload the DB from my computer.
That would be over 7MB I would have to download and upload for every
operation on the [extra] repo.
More information about the arch-dev-public