On Thursday 26 Jan 2017 15:08:25 Dale wrote: > That's my thinking as well. I recall not long ago that I caught a bad > sync.. It was several days later that I was able to get a good one and > even then, it required me to switch to another mirror. I think in my > case, someone decided to shut down that mirror but for some reason, only > removed some of the files there. Some very obvious packages were > missing. I noticed several KDE packages and even some that are in > @system missing.
I recall 12-13 years ago there was a proposal to improve security by sync'ing with different mirrors and diffing the output. I seem to recall someone had hacked a mirror and interfered with the tree served by it. The proposal was not taken up because it would double up the load on the mirrors and of course two mirrors may not be in exactly the same state at a particular point in time. -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
