> > The impact of a key is larger (good or bad) because it can be verified AFTER > > the files LEFT ftp-master. (And all of them leave FTP-MASTER before the > > ARRIVE at the user). > > And it affects all packages instead of a strict subset. Compromising dinstall code compromises all packages, not a strict subset.