Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:69860 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 5415 invoked from network); 25 Oct 2013 03:52:36 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 25 Oct 2013 03:52:36 -0000 Authentication-Results: pb1.pair.com smtp.mail=pierre@archlinux.de; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=pierre@archlinux.de; sender-id=pass Received-SPF: pass (pb1.pair.com: domain archlinux.de designates 144.76.107.12 as permitted sender) X-PHP-List-Original-Sender: pierre@archlinux.de X-Host-Fingerprint: 144.76.107.12 allison.archlinux.de Received: from [144.76.107.12] ([144.76.107.12:34039] helo=allison.archlinux.de) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 69/95-10840-10BE9625 for ; Thu, 24 Oct 2013 23:52:34 -0400 Received: from allison.archlinux.de (allison.archlinux.de [144.76.107.12]) (Authenticated sender: pierre@archlinux.de) by allison.archlinux.de (Postfix) with ESMTPSA id 514F26005C for ; Fri, 25 Oct 2013 05:52:30 +0200 (CEST) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Date: Fri, 25 Oct 2013 05:52:30 +0200 To: internals@lists.php.net Organization: Arch Linux Message-ID: X-Sender: pierre@archlinux.de User-Agent: Roundcube Webmail/0.9.5 Subject: Signing release tarballs From: pierre@archlinux.de (Pierre Schmitz) Hi all, atm only the git tags are signed using gpg. It would be awesome to also sign the tar files people download from the Downloads page. Also distros could verify those easily. I brought this up before, but recent events made me think it would be good to keep asking. Greetings, Pierre -- Pierre Schmitz, https://pierre-schmitz.com