Comment 15 for bug 1485511

gpgv currently in d-i can only do signature verification, and presumably it only does so with detached signatures.

TBH, I haven't dug in that much more than what's in the comment yet: I looked up code for InRelease support that was previously in Debian, and it was requiring a more complete gpg implementation for some reason.

This is on my list to fix today, I'll write the results here (or just upload things directly if it just works).