Nico Kadel-Garcia wrote: > What makes you think a site that is poisoning or abusing the metadata > would not simply run "createrepo" and generate entirely new metadat
But then it wouldn't match the metalink timestamps or checksums, that Dennis mentioned either. Or am I missing something? -- Rex -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
