On 7/8/15 9:50 AM, Daniel Kahn Gillmor wrote:
On Wed 2015-07-08 11:41:48 -0400, Daniel Kahn Gillmor wrote:If the environment variable $SOURCE_DATE_EPOCH is set, use that as the build date. otherwise, use the current date.See https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal for rationale.Alternately, we could just remove EnigBuildDate entirely. EnigBuildDate doesn't provide any robust linkage between a given package and its source code, and it is a source of unreproducibility which would be nice to avoid. I can send a patch for complete removal of EnigBuildDate if you prefer. let me know.
I can see where it would have value for dailies, but not for releases. Perhaps hide it behind a knob?
Doug --I am conducting an experiment in the efficacy of PGP/MIME signatures. This message should be signed. If it is not, or the signature does not validate, please let me know how you received this message (direct, or to a list) and the mail software you use. Thanks!
signature.asc
Description: OpenPGP digital signature
_______________________________________________ enigmail-users mailing list [email protected] To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
