Re: emacs-24.5-rc3.tar.xz modified in place

[Andreas Schwab]

Eli Zaretskii <address@hidden> writes:

>> From: Nicolas Petton <address@hidden>
>> Date: Fri, 10 Apr 2015 00:36:19 +0200
>> Cc: address@hidden
>> 
>> > I've downloaded emacs-24.5-rc3.tar.xz and the corresponding .sig from
>> > alpha.gnu.org twice, and they are different.  Both are signed by Nicolas
>> > Petton's public key (7C207910).  See below for the differences.
>> >
>> > It's bad practice to modify tarball releases without changing the
>> > version number.  Please don't do it.  Among other things, it breaks
>> > distributions such as GNU Guix that include cryptographic hashes of all
>> > source tarballs.
>> 
>> I'm sorry, that's my fault.
>
> No, it isn't.  There's no fault to begin with.

Yes, there is.  If a tarball needs to be replaced for whatever reason,
it *must* get a new file name.

Andreas.

-- 
Andreas Schwab, address@hidden
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."