>>>>> On Fri, 07 Jul 2006 11:22:16 +1000, Adam Kennedy <[EMAIL PROTECTED]> said:
> Andreas J. Koenig wrote: >>>>>>> On Fri, 07 Jul 2006 10:02:00 +1000, Adam Kennedy <[EMAIL PROTECTED]> >>>>>>> said: >> >> (What would be marginally worth it is having PAUSE sign distros. >> At >> >> least we can assure that the CPAN mirror didn't tamper with the >> >> files, which I think is the most likely "attack" on CPAN.) >> > Frankly, that's the best idea I've heard yet. >> What does it bring you more that the signed CHECKSUMS file? >> > That sounds more or less equivalent. Are they signed now? Yes, since about February 2003, courtesy Audrey. -- andreas
