DukeNM wrote:
> i notice very frequently when i have to download packages from the
> net.
>
> somewhere something called 'signature' or 'md5 sig'
>
> well i know what they are. but what should i be doing about them.
>
> i guess gotta do some verification of it, to check the integrity of
> the package which i am about to download. but could someone explain
> how this is done.

You can check a MD5 message digest with
md5sum filename
The MD5 sum has to be the same as on the net.
A file's MD5 sum changes when someone changed the file.

Emilio