Bug#819664: .sign suffix?

[Eduard Bloch <edi@gmx.de>]

Hallo,
* Steve McIntyre [Mon, Sep 26 2016, 03:14:21PM]:
> On Mon, Sep 26, 2016 at 09:10:37AM +0200, Stéphane Blondon wrote:
> >Hello,
> >
> >Le 25/09/2016 à 17:57, Eduard Bloch a écrit :
> >> I am slightly wondering about this new filename ending .sign. IMHO the
> >> usual pattern for such files was .gpg before (for example: Release.gpg).
> >> 
> >> This .sign looks weird, it does not tell you which format the data
> >> inside might have.
> >
> >Can you provide an example where the extension has changed?
> >
> >There are signatures ending with .sign for each cd, dvd, etc. images but
> >the suffix seems to be always .sign since release 3.1:
> >http://cdimage.debian.org/cdimage/archive/3.1_r0/i386/iso-cd/
> >
> >it's like today:
> >http://cdimage.debian.org/debian-cd/8.6.0/amd64/iso-cd/
> >
> >The scheme is
> >{MD5, SHAx}SUMS : the checksum according to each algorithm
> >{MD5, SHAx}SUMS.sign : the checksum signed by a Debian CD signing key
> 
> Exactly - we've been using the .sign filenames for many years for CD
> releases.

Uhm, ok, sorry, please forgive my failure to research.

Best regards,
Eduard.