I added this bug to the list of issues with securely downloading things from the archive at https://wiki.debian.org/Hardening/RepoAndImages It might be interesting to think about these problems together, maybe some of them can be solved in more general (or at least consistent) ways. -- Matt Taggart taggart@debian.org