Comment 1 for bug 608302

The situation described here is impossible - copied binaries are re-published in the target archive which has a signed Releases file (packages themselves are not signed).

There will be another explanation somewhere, like transparent proxies.