final release

[Eugen Leitl]

On Sat, May 15, 2004 at 02:52:42PM -0400, Jim Cornette wrote:

> I still feel uncomfortable with p2p transfers. Also, I don't like the 

You shouldn't. The integrity is asserted by the transport layer, you shall 
of course check digital signatures to assert you're downloading the genuine
thing (if you're paranoid that way, I personally don't bother to check at
this yellow-green threat level).

> idea of getting the download in fragments and then reconstructed. I 

TCP/IP does that, too. Are you uncomfortable with reading this mail as well?

> would rather get transfers from mirrors with a pretty good reputation, 
> instead of a bits and pieces download and reconstructed files.

If you want reputation tracking, use digital signatures to validate authenticity.
Anything else is easily fakeable.
 
> >Personally, I usually grab a copy via bittorrent and then give it to our
> >local mirror.

I personally much prefer to torrent, and leave the download session open for
at least a day, just to be a good bittorrentcitizen.

I only use http/ftp mirrors for those more braindead distributions who're not
into the wonders of P2P yet (hello? Debian? what gives?).

-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a>
______________________________________________________________
ICBM: 48.07078, 11.61144            http://www.leitl.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
http://moleculardevices.org         http://nanomachines.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-test-list/attachments/20040515/7e80bed6/attachment.sig>