Andreas J. Koenig wrote:
On Fri, 07 Jul 2006 10:02:00 +1000, Adam Kennedy <[EMAIL PROTECTED]> said:>> (What would be marginally worth it is having PAUSE sign distros. At >> least we can assure that the CPAN mirror didn't tamper with the >> files, which I think is the most likely "attack" on CPAN.) > Frankly, that's the best idea I've heard yet. What does it bring you more that the signed CHECKSUMS file?
That sounds more or less equivalent. Are they signed now? Adam K
