Re: [Gnu-arch-users] Mirror stats page updated & the wiki

[James Blackwell]

In lists.arch.users, Johannes Berg wrote:

>> However, I see that your checksum files aren't signed?=20
>>=20
>> Is this supposed to even be possible?
>
> Of course. As Tom explained a while ago, checksum files will _always_ be
> present (with recent versions of tla), while they are only signed if you
> have a signed archive. The checksum files are still checked to guard
> against transmission/media failures.

The question here isn't whether checksum files can exist at all.

The question is whether or not unsigned checksums should be valied in an
archive that is marked "signed-archive". The presense of a file named
"signed-archive" says to me that an archive is signed.

-- 
James Blackwell      Using I.T. to bring more             570-407-0488
Owner, Inframix      business to your business     http://inframix.com

GnuPG (ID 06357400) AAE4 8C76 58DA 5902 761D  247A 8A55 DA73 0635 7400