Re: signed tarballs
On Tue, Apr 11, 2017 at 10:03:54AM -0400, Steve Grubb wrote:
I added a sha256sum to the release announcement yesterday. You can
also access
the people page via https.
Thanks, but as I stated before. SHA256 and https doesn't ensure a
non-malicious tarball. Only a signed tarball can achieve this.
Attachments:
- signature.asc (application/pgp-signature — 833 bytes)