[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: A thought experiment regarding tag2upload and trust



On Mon, Jun 17, 2024 at 07:00:19AM +0200, Bastian Blank wrote:
> But maybe you can answer the question:  Given the .dsc file, how can
> you, and more critical the public, verify that you and only you signed
> that upload?

I'm surprised to learn that people check .dsc signatures, especially
as we don't really seem to support that.

-- 
WBR, wRAR

Attachment: signature.asc
Description: PGP signature


Reply to: