[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#1012552: Text on cloud.d.o incorrectly says all checksums are signed



On 2022-08-09 20:56:23 +0200 (+0200), Michael Kesper wrote:
> Wouldn't it be much better to provide these checksums than to
> change the documentation?

Changing the text can (thankfully now) happen fairly quickly. Adding
signing infrastructure to the Salsa CI pipeline for image building
is presumably a lot more work involving sensitive things like key
management. But since you're the one volunteering to do it... ;)

Also note that the checksums aren't missing, those are already
available. It's just signatures of the checksums lists which are not
yet.
-- 
Jeremy Stanley

Attachment: signature.asc
Description: PGP signature


Reply to: