> Using your logic you have to send me all your passwords. I'll take them by email please.

Where the heck was that written? That's not how Public / Private Keys work AT ALL.

> (And don't bother to PGP encrypt them as you can't trust the Debian GnuPG maintainer either.)

You do realize you can download, review, and compile from source? It's called Open Source for that very reason.

I expect more of an educated response on Hacker News than the one you have just demonstrated here.

While I generally agree, there is always the caveat of the Ken Thompson hack: http://programmers.stackexchange.com/questions/184874/is-ken...