Am Freitag, 21. Dezember 2012 schrieb Ludovic Courtès: > OTOH, what matters most here is the authenticity and integrity of the > tarball, and TLS doesn’t help here. Agreed, we do not gain anything with TLS here, since we hardcode the hash values. I just do not see myself asking people to turn off TLS... Andreas