On 20 July 2011 11:11, ilf <i...@zeromail.org> wrote: > In the mail with the release announcement.
checksums in the announcement is something as a package maintainer you can't automate and has to be manual and hence sucks. > Of course X.509 is broken and everything sucks, but it's what we have to > live with. And better than nothing. So would you be happy just with HTTPS and not checksums I wonder?