From: Ellen K. 

Question:   I understand that the updates themselves would not install
if not validly signed.   But following up the hypothetical case of the
WU server getting rooted, could something OTHER than the update not get
onto the client machine?

On Tue, 15 Feb 2005 20:20:11 -0800, "Rich"  wrote in message
:

>updates, which I believe aren't even served by the Windows Update servers, are
cryptographically signed and will not install if not validly signed.  This
is in contrast to the linux distros to which you made an analogy which
require users to find an independent source for the hashes of the valid
content and to validate the downloads themselves.

--- BBBS/NT v4.01 Flag-5