On Thu, Apr 14, 2016 at 8:23 AM, Tiago Ilieve wrote: > Actually the possibility of attaching a tarball signature exists for a > while[1]. Found it less than five minutes after sending this message. > :-) > > [1]: https://wiki.debian.org/Creating%20signed%20GitHub%20releases
This relies on github either storing the tarballs forever (rather than regenerating from the git repo) or never changing their gzip and git archive implementations. -- bye, pabs https://wiki.debian.org/PaulWise
