It would seem there are updated nss packages in the F13-ARM updates repository but they aren't signed. Is this an omission or is there foul play going on? Gordan