Signing release tarballs
| From: | Pierre Schmitz | Date: | Fri, 25 Oct 2013 03:52:30 +0000 |
| Subject: | Signing release tarballs | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-69860@lists.php.net to get a copy of this message | ||
Hi all,
atm only the git tags are signed using gpg. It would be awesome to also
sign the tar files people download from the Downloads page. Also distros
could verify those easily. I brought this up before, but recent events
made me think it would be good to keep asking.
Greetings,
Pierre
--
Pierre Schmitz, https://pierre-schmitz.com