Apt vulnerability sparks Debian security discussion

If you want people to change to more secure systems spend some time and make it stupid simple. Make it easy for people creating packages to sign them in an automated way. It has to be stupidly simple and well documented. Pretend a windows user is going to be using it.