Re: [be] Verification of release tar balls

[David Gardner]

On Fri, Sep 24, 2010 at 05:56:05PM +0200, Teus Benschop wrote:
> Thanks for the method to get the various checksums. I have created the
> sums and these are now online. New tarballs will also get their own
> checksums. Validation should now be possible. Teus.
> 
Hi Teus,
 I don't know if you have gpg set up,  but if you have then you could also
sign these files (on the build computer, which is not the web server,
I hope). Then there would be proof that the server hasn't been compromised.

David