On 2007-01-09T14:01, Peter Philipp wrote: ... > At that point (if you look at the timestamp) it's been 4 hours since the > OpenBSD main source did a change in the kernel versions and all the other > mirrors hadn't picked up the changes. So there was a checksum mismatch. I > was wondering whether a history file of checksums is a good thing to include > on > the main ftp site? That way one can check whether older revisions of > binaries are the right checksum? Otherwise one would not know (and there > would be no point of checksums then right?).
it would be simpler to sign all the tgz with gzsig (1) and verify the tgz with a offical key. Of course this has to be done by the OpenBSD devs. so long, Marcus.
