Hi Andrew,

Am Sonntag, den 02.03.2008, 21:59 -0500 schrieb Andrew Duggan:
> Sorry to be a pest, but why aren't there any gpg signatures for at least
> SHA1sums published for the tarballs for the recent 2.2.x series? Is it
> just an oversight?  

I suppose you mean "or at least" here? :-)

As you can see the GnuCash 2.2.4 release announcement contained md5sums
and was signed with my private gpg key.  I hope that is better than
before.

The one thing I wonder about is whether the tarballs or the announcement
mail should be signed with some sort of "GnuCash developer's key".  In
the end it is the release manager who downloads the source code and
packs it.  Please enlighten me in this issue 8-)

Thanks,
-- andi5

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil

_______________________________________________
gnucash-devel mailing list
[email protected]
https://lists.gnucash.org/mailman/listinfo/gnucash-devel

Reply via email to