This post originated from an RSS feed registered with Python Buzz by Richard Jones. Original Post: Python 2.3.1 digitally signed Feed Title: Richard's stuff Feed URL: http://mechanicalcat.net/cgi-bin/log?flav=rss Feed Description: Stuff I'm interested in Latest Python Buzz Posts Latest Python Buzz Posts by Richard Jones Latest Posts From Richard's stuff

Astute viewers might notice that along with the normal MD5 checksum, the Python 2.3.1 downloads also have a GPG signature (the "sig" link):

The signatures above were generated with GPG using the release manager's (Anthony Baxter) public key which has a key id of 6A45C816.

And thanks to a key chain of Anthony → Me → Jim Fulton (we signed each other's keys at the recent Sprint here - thanks Jim!) → Barry Warsaw → <a whole lot of people>, there's a large number of people out there that can verify that Anthony really did generate the file they're downloading from python.org.