On Sat, Oct 30, 2004 at 07:05:12PM +1000, Matthew Palmer wrote: > If we can get individually-signed .debs, you won't even need to worry so > much about getting the torrent files off a trusted mirror...
You don't need individually-signed .debs for that; the existing (experimental) archive signing mechanism works fine in this scenario. -- - mdz