[NTLUG:Discuss] Package security in Debian?

[brian@pongonova.net]

I was following a discussion recently in /. about how some distros are
using PKI to ensure precompiled package security (i.e., reasonable
assurance that a package is what it claims to be).  Having just
installed Debian, I found no reference to any type of package
security...choose an ftp site, and apt-get away.  Is this simply not
an issue with Debian users, or are there ways of being reasonably
assured a Debian mirror is carrying authentic, non-trojaned packages?

  --Brian