[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]

Re: Re: setting up mirrors



Suresh Ramasubramanian rearranged electrons thusly:

> Excellent. However, most ftp mirrors also give you the md5sum and sign the
> packages with the developer's PGP key, which can be verified.  On a p2p level,
> this vital safety net is missing.
 
errr... correct that to "and provide a pgp signed package".  I dont want to
imply that any mirror can sign a package with the developer's key :)

	--suresh

-- 
Suresh Ramasubramanian  <-->  mallet <at> efn <dot> org
EMail Sturmbannfuhrer, Lower Middle Class Unix Sysadmin