For the signature tests, I am not convinced that it is useful for anything more than an MD5 signature would be. By the time the test runs, you're already running code that could have been tampered with. It's really only useful for checking for accidental errors in the files (i.e., transmission problems). MD5 already does that just fine (even taking into account the general cryptographic issues with MD5).
SIGNATURE itself is still useful since you could check the signature yourself without the use of a test. Better yet, it should be integrated into CPAN(PLUS).pm (I belive CPANPLUS.pm already does, or plans to, but I'll have to check).
----
send money to your kernel via the boot loader.. This and more wisdom available from Markov Hardburn.
In reply to Re: How to create/generate META.yml and SIGNATURE files for CPAN
by hardburn
in thread How to create/generate META.yml and SIGNATURE files for CPAN
by stvn
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |