>Don't know if this is just me, but I'm getting reports on bad >signatures for all artifacts:
i've tested it on a linux machine and got GOOD results for the md5 and sha1 hashes, BAD only for pgp (although i've scanned the results only briefly and deleted them already) stefan