Matt, I think we can fight the "juarez" folks by making an automatic mechanism to verify uploads against the .changes file and move them into a visible area. If we want to verify the ID of the uploader we can have them PGP-sign the .changes file. I think Ian wants to be the one to move the file into the archive, but we can at least verify them and move them into a visible holding area. Thanks Bruce -- Visit the "Toy Story" Web Page! http://www.toystory.com