>>>>> On Fri, 07 Jul 2006 10:02:00 +1000, Adam Kennedy <[EMAIL PROTECTED]> said:
>> (What would be marginally worth it is having PAUSE sign distros. At >> least we can assure that the CPAN mirror didn't tamper with the >> files, which I think is the most likely "attack" on CPAN.) > Frankly, that's the best idea I've heard yet. What does it bring you more that the signed CHECKSUMS file? -- andreas