What on earth does rpm-md have to do with this? It exists on an entirely 
different level, and has checksums on the entire package file, at the time of 
repository generation. Files can get corrupted and truncated in transit from 
rpmbuild to a repository. That has happened in Fedora repos, people were not so 
happy when a malformed Thunderbird package found its way through all the 
alleged signature checking etc.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/163#issuecomment-283347048
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to