On Tue, 15 Jul 2003, Christopher Lenz <[EMAIL PROTECTED]> wrote:

> Do you mean that there's a risk that a "mirror" that is faking our
> release would also fake or remove the information about the
> signatures?

Exactly.

The same reasons you shouldn't trust KEYS files or signatures from the
mirrors should apply to the pages that link to the signatures IMHO.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to