Re: Reproducing the release tarballs

[Rod Widdowson via curl-library]

I usually checkin  the gpg signatures of the downloaded artifacts (which I have 
checked against verified keys) and make that part of the tag.
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html