On 31/12/12 05:26, Magnus Therning wrote:
On Fri, Dec 28, 2012 at 10:54:14PM -0500, Sébastien Leblanc wrote:
I believe signatures are checked after packages are rebuilt from deltas. Therefore, if your delta is compromised, the resulting package won't validate with the signature.
Excellent. I also notice you use the word "deltas", plural, which leads me to the next question :)
Will deltas be combined by pacman, or will only ever a single delta be used?
They can be combined. pacman does a calculation to see whether the delta chain is worth it.