Open
Description
openedon Apr 6, 2020
Both Chrome and Vivaldi offer Debian/RPM packages to download from their websites. Once installed, they automatically add a new GPG key to the trusted keyring and then enable automatic updates.
We deviated from the packaging that's built into Chromium in order to modernize it and facilitate key rotation. This issue is about revisiting this decision based on our experience rotating signing keys and extending expiry dates.
In other words, we would offer a single .deb
/.rpm
that would:
- install the browser
- install our signing key to the local keyring
- install our repository
Originally suggested on https://twitter.com/PavanGayakwad/status/1246673744900182018.
Activity