README for the debian-archive-keyring package
=============================================

Introduction
------------

The Debian project signs its Release files that are stored on the
Debian ftp-server and its mirrors with the keys contained in this
packages.

A quick overview about this package:

* Each actively used key is placed in /etc/apt/trusted.gpg.d/ to
  be used by "apt" and its apt-key command in versions 0.6 and later.
  The signatures of acquired Release files is checked against this
  key database. It hence contains all keys of releases that are still
  supported and need to be active.
* /usr/share/keyrings/debian-archive-keyring.gpg:
  A keyring including all actively used keys to sign Release files in
  our supported releases is shipped in /usr/share/keyrings.
* /usr/share/keyrings/debian-archive-removed-keys.gpg:
  A keyring including all keys used by previous releases, which are
  no longer supported. These keys are no longer used to sign
  Release files.

More information about the archive authentication feature can be found
in the manpage apt-secure(8).