Comment 11 for bug 159304

Revision history for this message
Luca Falavigna (dktrkranz) wrote : Re: [Bug 159304] Re: Signed changes upload replay attack vulnerability

James Henstridge ha scritto:
> I guess https://blueprints.launchpad.net/soyuz/+spec/ssh-package-upload
> might mitigate the problem for Ubuntu developers, but might it still be
> a problem for users who also happen to be Debian developers?

I don't think this will harm Debian. We use different suites (e.g.
intrepid against unstable) and uploads for an unknown suite should be
rejected by dak.