man/: Improve authentication and checksum support comment in .debsa

Closes: #492052

ChangeLog

@@ -1,3 +1,8 @@
+2008-08-15  Guillem Jover  <guillem@debian.org>
+
+	* man/dpkg-deb.1 (BUGS): Improve comment about missing authentication
+	and checksum support in .deb files.
+
 2008-08-05  Guillem Jover  <guillem@debian.org>
 
 	* lib/ehandle.c: Include <dpkg-priv.h>.

debian/changelog

@@ -31,6 +31,8 @@ dpkg (1.15.0) UNRELEASED; urgency=low
   * Do not leave new conffile as .dpkg-new when it has been diverted, also
     properly activate the file trigger for the diverted conffile.
     Based on a patch by Timothy G Abbott. Closes: #58735, #476899
+  * Improve comment on BUGS section in dpkg-deb.1 about lack of authentication
+    and checksum support in .deb files. Closes: #492052
 
   [ Raphael Hertzog ]
   * Enhance dpkg-shlibdeps's error message when a library can't be found to

man/dpkg-deb.1

@@ -227,6 +227,10 @@ does the wrong thing.
 There is no authentication on
 .B .deb
 files; in fact, there isn't even a straightforward checksum.
+(Higher level tools like APT support authenticating \fB.deb\fP packages
+retrieved from a given repository, and most packages nowadays provide an
+md5sum control file generated by debian/rules. Though this is not directly
+supported by the lower level tools.)
 
 Do not attempt to use just
 .B dpkg\-deb