Re: [Haskell-cafe] [Security] Put haskell.org on https

How do you get a copy of cabal while making sure that somebody hasn't MITMed you and replaced the PGP key?

You don't. Somewhere, you just have to trust that nothing went awry. The best thing to do is just to make it as difficult as possible for an attacker to be successful - make the PGP keys widely known and have a lot of people sign them. -- Michael Walker (http://www.barrucadu.co.uk)