> hardening and intrusion detection. The packaging system has also been > improved so it can be configured to automatically check digital > signatures. Thus, it will refuse to install packages from Debian that > do not verify correctly, limiting the possibility of trojan packages There are, as far as I know, no packages in debian that are signed. It's certianly not in wide enough use to mention. -- see shy jo