Posted Nov 9, 2003 6:43 UTC (Sun) by EricBackus (guest, #2816)
[Link]
> Almost all packages are signed, though apparently > policy doesn't require it yet. Check with debsums.
OK, good. So I assume that apt-get automatically rejects (or at least *can* reject) packages that aren't signed by somebody it recognises as legitimate?