On 2009 Oct 08 (Thu) at 01:34:36 +0200 (+0200), Martin Schröder wrote:
:2009/10/8 Stuart Henderson <st...@openbsd.org>:
:> If you want something better, download SHA256 and check the hashes.
:
:I know this has been discussed before, but other free OS solve this
:problem (among others) by signing their packages. Feel free to flame me.
:
package signing does nothing extra for partial-sync mirrors. the reason why
the SHA256 file works is that these are the SHA hashes for the entire
batch.
--
Steele's Plagiarism of Somebody's Philosophy:
Everybody should believe in something --
I believe I'll have another drink.
