Delegates, Communicate!

I surely am not the only firewall operator who doesn’t allow security relevant hosts to connect anywhere via http. So, when security.debian.org’s IP changed, my cron-apts wrecked themselves on their own firewalls. Manual intervention was required, which is a feature.

But, oh people, why don’t you announce changes like this through the official communication channels, and why don’t you do so in advance? A lot of confusion could have been avoided that way.

You might argue that that’s what DNS is for, but DNS is still trivially forged, because DNSSEC has not yet developed the broadness of usage that one would wish for. You might argue that one should check Package and Archive Signatures, but Debian stable doesn’t have these features yet (or doesn’t have them enabled by default).

I am not asking for more elaborate technical measures. I am asking for a courtesy: If you intend to do something which might influence other people’s systems, please communicate your intent. Do so through the official channels, and do so in advance. It feels so good to be prepared. Please help.

Courtesy is optional, I know. But I think that Debian should become more friendly. And communication is so easy. Debian wouldn’t be here if it weren’t for easy communication. All we need to do is communicate.