From aba813975abb880f8b27d659147f7760c02f99e7 Mon Sep 17 00:00:00 2001
From: Julian Andres Klode <julian.klode@canonical.com>
Date: Tue, 27 Jun 2023 19:14:43 +0200
Subject: update: Add notice about missing Signed-By in deb822 sources

We want to gently steer users towards having Signed-By for each
source such that we can retire a shared keyring across sources
which improves resilience against configuration issues and
incompetent malicious actors.
---
 doc/examples/configure-index | 1 +
 1 file changed, 1 insertion(+)

(limited to 'doc')

diff --git a/doc/examples/configure-index b/doc/examples/configure-index
index d220a814f..6a168192c 100644
--- a/doc/examples/configure-index
+++ b/doc/examples/configure-index
@@ -130,6 +130,7 @@ APT
         {
            APTAuth "<BOOL>";
            NonFreeFirmware "<BOOL>";
+           SignedBy "<BOOL>";
         };
      };
   };
-- 
cgit v1.2.3-70-g09d2