From: John Beckett 

"Geo."  wrote in message
news::
> Doesn't that strike you as sounding really insecure way to do things? How
> does the browser know it's not been spoofed into believing some hacker is
> windows update?

I don't know the details, but the official statement is that all SUS
downloads are checked as being signed and unchanged both by SUS, and by AU
on each client (when it gets the update from SUS).

John

--- BBBS/NT v4.01 Flag-5