Security issues:
****************

ZIP -AV
-------

The ZIP archive you just opened contained an -AV envelope.

Authentic files Verified!   # OBD305
MetroNET BBS

If the archive fails the authentication test, please do NOT use
it and inform support@avp.ch immediately. Please only download
the distribution archive from an official source (such as an
authorized AVP distributor). Some BBSs are repacking ZIP archives
and add their own -AV envelopes. If you consider your BBS a trustworthy
source, then you shouldn't worry. An additional level of security is
provided through PGP digital signature (see below).


PGP digital signature
---------------------

To check the authenticity of the file SETUP.EXE, you need
PGP, Pretty Good privacy. This file however is not a tutorial on how to
use PGP, it is assumed you know how to use it.

The file "SETUP.ASC" contains a detached digital signature.

To get the necessary PGP public, send an empty mail to: pgp@metro.ch -
within a minute or so, you will receive the necessary PGP public key you
have to add to your public key ring.

Check the integrity of SETUP.EXE like this:

pgp setup.asc setup.exe

PGP will output a message like this:

[...]
Good signature from user "Gerard Vuille <gerard.vuille@metro.ch>".
[...]

If you get a "bad signature" message, you are either using a
wrong public key from us, or the file has been tampered with.
Should the latter be the case, contact us immediately (support@avp.ch) and
don't run the archive.





