"Download & Install" vs "Repositories & Synaptic" and the need for a new URI [Was: Re: Going forward [Re: Automatix?]]

[Chanchao]

On Fri, 2006-03-31 at 21:43 +0100, Tristan Wibberley wrote:

> I think such a click install thing should be able to just select
> packages from pre-configured repositories, and should be able to
> *request* temporary addition of repositories, with the client giving a
> *big* fat warning for new packages to be installed, and an even
> *bigger*, *fatter* warning for packages being replaced that were
> initially installed from a repository with a different signature.

Yes, or not allow it at all. Chances are that whatever the app is, it's
in the usual repositories.  Just a link that points to it from a website
is enough IMHO. It should not make things less secure. 

Cheers,
Chanchao