[packagekit] 1-click; Third party vendors; etc.

[Jan Niklas Hasse]

On Mon, Jun 2, 2008 at 8:45 PM, Klaus Kaempf <kkaempf at suse.de> wrote:
> Random packages ? Certainly not.
>
> Question is, how can one define and ensure a trust relationship between
> the site offering the package and the user ? How can PackageKit support
> this trust relationship ?

IMHO packages should just be installed from the main repositories and
3rd party apps should use something like Autopackage, Klik or
Zeroinstall as all of them allow you to install as normal user.
Another thing is a binary installer, which, if it doesn't require root
access, is also more secure then deb or rpm.