Re: [Gnu-arch-users] Re: MD5 is broken

[Aaron Bentley]

John Arbash Meinel wrote:
> Why not put both detached signatures into the checksum file?

It's not 'both', it's 'all', and in many cases, 'all' is 4 or more 
files.  That's a lot of times to enter your password for signing.

(gpg: --clearsign does not yet work with --multifile)

Aaron

--
Aaron Bentley
Director of Technology
Panometrics, Inc.