[PATCH 1/2] release: provide clearsigned sha256sum
Daniel Kahn Gillmor
dkg at fifthhorseman.net
Sat Mar 23 05:56:01 PDT 2019
On Tue 2019-03-19 07:08:18 -0300, David Bremner wrote:
> To quote id:87ftrpgjdb.fsf at fifthhorseman.net
>
> if the thing verified is the output of sha256sum, then the
> *filename* of the tarball itself is included, then the standard
> verification step will is sufficient to ensure that you've got the right
> version in the filename.
>
> This is in addition to the detached signature on the tarball
I think the 3-part series i published starting at
id:20190323123544.6264-1-dkg at fifthhorseman.net supercedes this patch.
thanks for maintaining our release processes, David!
--dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://notmuchmail.org/pipermail/notmuch/attachments/20190323/f2d4ed75/attachment.sig>
More information about the notmuch
mailing list