The Lede git repositories provide no signed tags.

It is therefore difficult to verify if the downloaded repository has
been tampered with or should be trusted.

For each repository there should be at least one responsible person who
will create signed tags at regular intervals.

Best regards

Heinrich Schuchardt

_______________________________________________
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev

Reply via email to