On Wed, Dec 05, 2007, STeve Andre' wrote:
> On Wednesday 05 December 2007 18:22:19 Claus Assmann wrote:
> > Someone actually did the former with sendmail.org (to distribute a
> > version of sendmail with a backdoor). The problem was only noted
> > because users checked the (digital) signature.
> You know, you're descending into a recursive loop of "if, if, if..." and
> it never ends. OF COURSE if someone breaks into the site they could
> do things--once you've lost control of your site all bets are off. I dare
^^^^^^^^^^^^^^^^
Hmm, did you read what I wrote?
The breakin was detected due to the digital signature.
Anyway, it's obviously up to the OpenBSD developers what they do.