On Wed, Dec 05, 2007, STeve Andre' wrote:

quoted text
> On Wednesday 05 December 2007 18:22:19 Claus Assmann wrote:

> > Someone actually did the former with sendmail.org (to distribute a

quoted text
> > version of sendmail with a backdoor).  The problem was only noted

> > because users checked the (digital) signature.

> You know, you're descending into a recursive loop of "if, if, if..." and

quoted text
> it never ends.  OF COURSE if someone breaks into the site they could

> do things--once you've lost control of your site all bets are off.  I dare

                                                   ^^^^^^^^^^^^^^^^

Hmm, did you read what I wrote?
The breakin was detected due to the digital signature.
Anyway, it's obviously up to the OpenBSD developers what they do.