On Thu, 31 Jul 2008 14:16:53 +0200 Pär Andersson <paran at lysator.liu.se> wrote: ... >KDE 3.5 releases used to have a separate repository on kubuntu.org, signed by >Jonathan Riddells GPG key, I think that solution was much better. Given the current issues with DNS cache poisoning, I think the bit about signing is particularly important. Scott K