Re: RFC: Signed packages and translations
> > which uploads? There are no extra uploads.
> There have to be, in my eyes. Consider this scenario:
katie can pretend there has been an upload.
> OK, but re-diffing will invalidate the maintainer's signature on the
> diff! Hm, I guess this doesn't matter as long as that sig's sole
> purpose is to authorize the upload. :-/
Putting the translations into the diff is not a good idea IMO, since I
never download my own packages, so I never get updated translations.