The MD5SUM file for the Fedora ISOs is signed with the key from RPM-GPG-KEY-fedora. Is there a somewhat trustworthy source for this key (at least an SSL download for which I could check the host certificate). Without this, there's very little point in signing the MD5SUM file.
Thanks! -- ======================================================================== Ian Pilcher i.pilcher@xxxxxxxxxxx ========================================================================