> With a 1024bit DSA key last I heard, not very secure. Breaking encryption of DSA and doing fake DSA messages are 2 very different tasks. > And that is assum

> With a 1024bit DSA key last I heard, not very secure. Breaking encryption of DSA and doing fake DSA messages are 2 very different tasks. > And that is assuming the updater doesn't contain other flaws. And you believe that a full TLS stack will have less flaws than a DSA-check? That Gnutls is simpler than gcrypt? Your argument about flaws would push to have simpler code, not more complex one.