(fwd from jerry@theashergroup.com) Suggestion: describe (or link to) how to verify your distributions

[David W. Chapman Jr.]

On Fri, Nov 22, 2002 at 01:08:39PM -0800, Martin Pool wrote:
> Yeah, sure, but:
> 
>  What does this all mean?  Why should I care?
> 
>  Where do I get GPG?
> 
>  Where do I get the samba codesigning key?  How do I import it?   How
>  do I know I got the right one?
> 
>  What do I do if it doesn't verify?
> 
I always wondered if someone uploaded a tarball with a trojan, what's 
preventing them from updating the .asc file as well?

-- 
David W. Chapman Jr.
dwcjr at inethouston.net	Raintree Network Services, Inc. <www.inethouston.net>
dwcjr at freebsd.org	FreeBSD Committer <www.FreeBSD.org>