On Thu, 12 Apr 2001, Philip Charles wrote:

> On Thu, 12 Apr 2001, J.A. Bezemer wrote:
> > So I think we should continue to generate _correct_ Packages files for
> > each CD, and solve the "signing issue" using some other method. 
> 
> I repeat my earlier suggestion. Sign md5sums.gz, this is supposed to be
> the accuracy and security file.  A script could be provided for the

Insufficiant, and prone to the same problems AJ described.

The Release signature covers the pre-scanned package meta data and that is
important too. 

Jason


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to