On 31/12/12 05:26, Magnus Therning wrote: > On Fri, Dec 28, 2012 at 10:54:14PM -0500, Sébastien Leblanc wrote: >> I believe signatures are checked after packages are rebuilt from >> deltas. Therefore, if your delta is compromised, the resulting >> package won't validate with the signature. > > Excellent. I also notice you use the word "deltas", plural, which > leads me to the next question :) > > Will deltas be combined by pacman, or will only ever a single delta be > used? > They can be combined. pacman does a calculation to see whether the delta chain is worth it.