Bug#704180: Use p11-kit to replace nssckbi

[Daniel Kahn Gillmor]

On Sun 2019-01-13 20:40:08 +0100, Laurent Bigonville wrote:
> The problem is that if nothing is pulling the new package in the default 
> installation, nobody will ever use it.

hm, this is true, but it's also likely to be true for a non-default
debconf choice as well, right?  most people keep their debconf priority
at low, and i can't imagine that we'll add this as a high-priority
debconf question.

> And we will create a new difference between debian and the other
> distributions.

David Woodhouse suggests that Fedora ships this configuration choice as
a distinct package called p11-kit-trust -- so as long as we name the
package the same way, we're actually closing a gap between debian and
the other distros.

    --dkg