> So why haven't they?
They are: https://wiki.debian.org/Teams/Apt/Spec/AptSign
Mandatory aptsign by 2025 and GPG tentatively removed by 2027: https://gemmei.ftp.acc.umu.se/pub/debian-meetings/2022/DebCo...
> my argument is neither for nor against PGP... I'm tired of hearing about how much PGP sucks without also hearing about the solution.
If you're not actually paying attention to what happens in the world around you, your argument is for PGP.
> So why haven't they?
They are: https://wiki.debian.org/Teams/Apt/Spec/AptSign
Mandatory aptsign by 2025 and GPG tentatively removed by 2027: https://gemmei.ftp.acc.umu.se/pub/debian-meetings/2022/DebCo...
> my argument is neither for nor against PGP... I'm tired of hearing about how much PGP sucks without also hearing about the solution.
If you're not actually paying attention to what happens in the world around you, your argument is for PGP.