On 05/02/2004 at 14:43, Colin Leroy wrote: > > > Maybe the tarball on kernel.org is broken ? > > > > No it is'nt. > > Hence my "Doubtful" sig ;)
You're right, I didn't read it :) And *a lot* of people would have complained about it (at least in lkml). > > And may I suggest anyone downloading any kind of software from any > > trusted site to *always* ckech gpg signature if available (and > > kernel.org has the files signed). > > Yup. Too bad rsync doesn't have something to address this... Indeed. -- Kiko
