--- James Cameron <quozl at us.netrek.org> wrote:
> 
> One reads the man page for the md5sum command.  If you
> have no system
> handy with such a man page, use google on a query "man
> page of md5sum".

Ah! Ta~

> No.  There is no need.  When Vanilla is released, an
> md5sum of the whole
> package .tar.gz is included in the release announcement.

Is it possible for a hacker to break into my system, alter
the tarball package and yet for the md5sum to remain
unaltered?

> One doesn't.  Use digital signatures.  I sign release
> announcements.
> I'll sign this message.  If your e-mail service can't
> hack digital
> signatures, use a better one.

I found this attached:
-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.2.4 (GNU/Linux) 



iD8DBQFAvRhYbmRwv64kZsARAkwrAJ9JtYSfmPg1cm46ucQkRkEAvRcgHACfcLkJ

4e+VsYzEaLacUJVqwRwF3E4=

=O7rS

-----END PGP SIGNATURE-----


So now how would I send you a message encrypted with the
key?

Zach




	
		
__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/ 

_______________________________________________
vanilla-devel mailing list
vanilla-devel at us.netrek.org
https://mailman.real-time.com/mailman/listinfo/vanilla-devel