Access and mirrors

Mirror updates are signed, and the address you use should come from that signed list. For a first-time reader the trap to avoid is assuming the ordinary-looking shop makes the safety steps optional. The verification is identical to every other entry in the directory.

See also the access topic for the general note on why markets run multiple mirrors and how to rotate across them when one stalls.