Nico Kadel-Garcia wrote: > What makes you think a site that is poisoning or abusing the metadata > would not simply run "createrepo" and generate entirely new metadat But then it wouldn't match the metalink timestamps or checksums, that Dennis mentioned either. Or am I missing something? -- Rex