Differences between tar.bz2 and tar.gz package

[Yan Li]

Hi All,

I've downloaded both the .tar.bz2 and .tar.gz packages of GnuCash
2.2.5, and to my surprise, their contents are different! Please see
the attachment.

Which one should I trust? Or anything wrong with my network?

One more thing: now packages' signatures are not released along with
the packages. I think it's still necessary for the vast users to have
a way to check the integrity of such a great piece of software.

Thanks!

-- 
Li, Yan