[PATCH 1/2] release: provide clearsigned sha256sum

Daniel Kahn Gillmor dkg at fifthhorseman.net
Sat Mar 23 05:56:01 PDT 2019


On Tue 2019-03-19 07:08:18 -0300, David Bremner wrote:
> To quote id:87ftrpgjdb.fsf at fifthhorseman.net
>
>      if the thing verified is the output of sha256sum, then the
>      *filename* of the tarball itself is included, then the standard
>      verification step will is sufficient to ensure that you've got the right
>      version in the filename.
>
> This is in addition to the detached signature on the tarball

I think the 3-part series i published starting at
id:20190323123544.6264-1-dkg at fifthhorseman.net supercedes this patch.

thanks for maintaining our release processes, David!

       --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://notmuchmail.org/pipermail/notmuch/attachments/20190323/f2d4ed75/attachment.sig>


More information about the notmuch mailing list