Re: sample repository metdata xml file

seth vidal wrote:

>how does this look?
>http://linux.duke.edu/~skvidal/metadata/repomd.xml
>  
>

Um, designing signature trust across multiple files with Yet Another File
is hard.

Try onepass signatures on compressed XML. The cost will be that
you will need to parse from pipe to gpg exec rather than slurping the 
file itself.

The benefit is that each file will have it's own signature, and you
won't have to muck with compression/signing in python.

73 de Jeff