Ensuring authenticity of packages

[Ryszard Lach <siaco@id.pl>]

Hi!

I'm wondering how to check authenticity of packages after downloading the code
from the network. One method is downloading source packages, checking signatures
and building binary packages. Is there any other possibility ? Maybe there is a
kind of "HOW TO efficient organize secure package-archive-site" ?

T.I.A.

Siaco.

-- 
Ryszard Łach, Internet Designers s.c., Przedmiejska 6-10, 54-201 Wrocław
'echo "" |mail -s "send key pub" siaco@id.pl' for my public GPG key