The May “Bits from the Debian Project Leader” posting includes a notice that the debian-multimedia.org domain — once the site of a popular Debian package repository — has expired and been grabbed by an unknown entity. If any Debian users have references to that site in their APT configurations, now would be a good time to take them out. As Lucas Nussbaum says: “This is a good example of the importance of the use of cryptography to secure APT repositories (and of the importance of not blindly adding keys).“
Read more at LWN
