Hello, On Tue 23 Jul 2019 at 01:21PM +10, Stuart Prescott wrote: > A more general question about these data -- is there enough information in > the dsc and Git-Tag-Info/Git-Tag-Tagger to know *what* was signed and where > it is located? I like that the proposal is to maintain the signer's > information into the archive; I'd like also to know how to verify the > signature later on should I wish to do so and I assume I need to know what > to git clone and which tag to git tag -v. If there is an accurate Vcs field, then there is enough in the .dsc to fetch the right tag from salsa. -- Sean Whitton
Attachment:
signature.asc
Description: PGP signature