Re: list of upstream tarball signing schemes?
On Fri, Dec 13, 2019 at 10:55:34AM +0100, Thomas Koch wrote:
> I'm packaging nix: https://nixos.org/releases/nix/latest
> It releases 3 files:
> nix-2.3.1.tar.xz.asc - which signs the .sha256
Why does this not contain a signature of the file itself? The correct
filename for this schema would be nix-2.3.1.tar.xz.sha256.asc.
> nix-2.3.1.tar.xz.sha256 - which contains the hash of the tarball
> nix-2.3.1.tar.xz
Regards,
Bastian
--
You can't evaluate a man by logic alone.
-- McCoy, "I, Mudd", stardate 4513.3
Reply to: