[eclipse-mirrors] Question on security

[Carin Ohlsson <carin.ohlsson@xxxxxxxxxxxxxxx>]

Hi,
I'm investigating the possiblity of setting up an internal mirror site
for a larger organisation. The organization have some security concerns
which I need to address. We need to be sure that we download from the correct
host (for example by PGP signing) and be assured the files are not tampered
with on the way (for example MD5 checksum).  Is it possible to use
PGP signing and MD5 when mirroring with rsync from Eclipse.org?  

Best regards,
Carin Ohlsson