| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Extend v3 subkey expiry to 2026, owing to OBS use | Julian Andres Klode | 2025-01-01 | 1 | -0/+2 |
| | | | | | | SUSE's Open Build Service is signing multiple repositories using v3 signing keys. | ||||
| * | debian: Add default policy to allow SHA-1 self-signatures until 2026 | Julian Andres Klode | 2024-12-22 | 1 | -0/+2 |
| Many repositories still have SHA-1 self-signatures, and they are not security relevant for APT repositories in the first place since we do not use a web of trust model, but rather a set of trusted keyrings, and the subkey can essentially be always considered trusted even if it cannot be verified. | |||||
