Comment 5 for bug 24408

Message-ID: <email address hidden>
Date: Sat, 22 Oct 2005 02:16:39 +0200
From: David Madore <email address hidden>
To: <email address hidden>
Subject: apt-get --allow-unauthenticated still prefers authenticated packages on network to
 unauthenticated on localhost

Package: apt
Version: 0.6.41
Severity: serious

The --allow-unauthenticated option does not revert to the exact
pre-0.6.27 behavior: even when this flag is passed on the command
line, apt still favors an authenticated package on the network to an
unauthenticated package on the local host (say with a file:/// URL in
the sources.list).

No combination of switches seems to be sufficient to _completely_
remove any kind of authentication-related feature (and revert to the
pre-0.6.27 behavior in all respects).

This severely breaks very-low-bandwidth systems where it is assumed
that the local package set will be favored over the networked ones.

--
     David A. Madore
    (<email address hidden>,
     http://www.madore.org/~david/ )