On Wed, Dec 05, 2007, STeve Andre' wrote:
quoted text
> On Wednesday 05 December 2007 18:22:19 Claus Assmann wrote:

quoted text
> > Someone actually did the former with sendmail.org (to distribute a
> > version of sendmail with a backdoor).  The problem was only noted
> > because users checked the (digital) signature.

quoted text
> You know, you're descending into a recursive loop of "if, if, if..." and
> it never ends.  OF COURSE if someone breaks into the site they could
> do things--once you've lost control of your site all bets are off.  I dare
                                                   ^^^^^^^^^^^^^^^^

Hmm, did you read what I wrote?

The breakin was detected due to the digital signature.


Anyway, it's obviously up to the OpenBSD developers what they do.