[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]
Re: Re: setting up mirrors
Suresh Ramasubramanian rearranged electrons thusly:
> Excellent. However, most ftp mirrors also give you the md5sum and sign the
> packages with the developer's PGP key, which can be verified. On a p2p level,
> this vital safety net is missing.
errr... correct that to "and provide a pgp signed package". I dont want to
imply that any mirror can sign a package with the developer's key :)
--suresh
--
Suresh Ramasubramanian <--> mallet <at> efn <dot> org
EMail Sturmbannfuhrer, Lower Middle Class Unix Sysadmin