Georg Koppen:
Hmm... What happens in cases like the following:
4 authorities include a PACKAGENAME/VERSION pair with URL1 and DIGEST1 and 4 other authorities include the same PACKAGENAME/VERSION pair with URL2 and DIGEST2 and, say, 1 authority includes no such PACKAGENAME/VERSION pair at all? Which line gets included given that only one of them can make it into the consensus?
The different URLs do not really matter. So, for simplicity's sake, just assume the only difference in the package lines is between DIGEST1 and DIGEST2.
Georg