[pacman-dev] GPG work

Loui Chang louipc.ist at gmail.com
Mon Dec 8 10:00:19 EST 2008

On Mon, Dec 08, 2008 at 07:08:20AM -0600, Dan McGee wrote:
> We sign *packages*, not repositories. Will this damn thing about MD5
> please die? "Fixing" that still fixes nothing, and I'll pay one
> million USD to someone that can actually forge a package with a given
> MD5.
Hah hah! I have my work ahead of me!

More information about the pacman-dev mailing list