There *must* be a better way for contributors to gain a klama account. With the dramatic increase in packages and contributors, poor Lenny must be snowed under. I *almost* feel guilty bugging him:-)
and all official and contrib files should be signed... It is a little bit scary situation to install packages with --no-verify-rpm. Now basically anybody hacking access to ftp mirror can replace packages too easily with the evil code.
Mika
