[arch-general] Making pacman check multiple repos

[Xavier]

On Sun, Dec 13, 2009 at 12:49 PM, Heiko Baums <lists at baums-on-web.de> wrote:
> Am Sun, 13 Dec 2009 09:02:16 +0000
> schrieb Nathan Wayde <kumyco at konnichi.com>:
>
>> Of-course this also raises the question of 'what happens when the
>> master goes down?'.
>
> Or gets hacked?
>

The changes you talked about don't really make that problem any worse
than it already is.
If master goes down or gets hacked, all mirrors are syncing from it
anyway (directly or indirectly) so you are fucked.

If you worry about it going down, then you provide other masters (you
can give money or hardware or hosting)
If you worry about getting hacked, you use signatures (you can give
money or code)