# Signing release tarballs

- Thread: https://externals.io/message/69860
- Original archive: https://news-web.php.net/php.internals/69860
- Started by Pierre Schmitz on 2013-10-25T03:52:30+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #69860 — Pierre Schmitz — 2013-10-25T03:52:30+00:00

URL: https://externals.io/message/69860#69860

Hi all,

atm only the git tags are signed using gpg. It would be awesome to also
sign the tar files people download from the Downloads page. Also distros
could verify those easily. I brought this up before, but recent events
made me think it would be good to keep asking.

Greetings,

Pierre

-- 
Pierre Schmitz, https://pierre-schmitz.com