On Wed, Mar 20, 2002 at 08:45:49PM +0100, Florian Weimer wrote: > Signing packages themselves is a much better approach IMHO. Agreed, but it is not yet available. Last time I tried to upload a package with a maint signature, katie complained loudly (or was that a coincidence? It seems my lat upload to non-us was silently ignored).