söndagen den 11 november 2007 skrev Rahul Sundaram: > http://fedoraproject.org/verify is up. Would be added to the download > page soon. That page says, quite correctly, that the downloaded file should be verified for security and integrity. Then it says that if the file was downloaded via Bitorrent it has already been verified. Is that really so? As far as I know Bittorrent verifies for integrity but not for security – that is, it guards against errors in the download process but not against a maliciously modified torrent. Does Bittorrent verify some cryptographic signature that I don't know about? Björn Persson
