> It's my impression that signed packages aren't a priority > for the BSDs in general.
It will happen when one of their mirrors gets rooted, or one of their devs gets their machine, and thus their dev account, rooted. The kernel.org, gnu/fsf and debian[?] incidents all come to mind. Too bad it seems we'll have to wait for that. Not that this is a strike against them... the projects are likely simply busy. Signing packages isn't enough... the chain has to go all the way back to the repo itself. git (dragonflybsd) makes that possible easily. svn (freebsd), cvs (openbsd, netbsd) don't. Sorry, off topic. _______________________________________________ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk