From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <david@tethera.net>
Received: from localhost (localhost [127.0.0.1])
 by arlo.cworth.org (Postfix) with ESMTP id 935FF6DE0F3E
 for <notmuch@notmuchmail.org>; Tue, 12 Mar 2019 03:55:24 -0700 (PDT)
X-Virus-Scanned: Debian amavisd-new at cworth.org
X-Spam-Flag: NO
X-Spam-Score: -0.013
X-Spam-Level: 
X-Spam-Status: No, score=-0.013 tagged_above=-999 required=5
 tests=[AWL=-0.012, SPF_PASS=-0.001] autolearn=disabled
Received: from arlo.cworth.org ([127.0.0.1])
 by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id E9Zkfy_3HOpu for <notmuch@notmuchmail.org>;
 Tue, 12 Mar 2019 03:55:24 -0700 (PDT)
Received: from fethera.tethera.net (fethera.tethera.net [198.245.60.197])
 by arlo.cworth.org (Postfix) with ESMTPS id 04F936DE0F35
 for <notmuch@notmuchmail.org>; Tue, 12 Mar 2019 03:55:23 -0700 (PDT)
Received: from remotemail by fethera.tethera.net with local (Exim 4.89)
 (envelope-from <david@tethera.net>)
 id 1h3f44-0001qH-Am; Tue, 12 Mar 2019 06:55:20 -0400
Received: (nullmailer pid 8512 invoked by uid 1000);
 Tue, 12 Mar 2019 10:55:19 -0000
From: David Bremner <david@tethera.net>
To: Carl Worth <cworth@cworth.org>, Adam Majer <amajer@suse.de>,
 notmuch@notmuchmail.org
Subject: Re: [PATCH] build: sign tarball instead of sha256sum
In-Reply-To: <20190213021703.18412-1-david@tethera.net>
References: <87mun16gmm.fsf@wondoo.home.cworth.org>
 <20190213021703.18412-1-david@tethera.net>
Date: Tue, 12 Mar 2019 07:55:19 -0300
Message-ID: <87lg1kcqg8.fsf@tethera.net>
MIME-Version: 1.0
Content-Type: text/plain
X-BeenThere: notmuch@notmuchmail.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Use and development of the notmuch mail system."
 <notmuch.notmuchmail.org>
List-Unsubscribe: <https://notmuchmail.org/mailman/options/notmuch>,
 <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>
List-Archive: <http://notmuchmail.org/pipermail/notmuch/>
List-Post: <mailto:notmuch@notmuchmail.org>
List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>
List-Subscribe: <https://notmuchmail.org/mailman/listinfo/notmuch>,
 <mailto:notmuch-request@notmuchmail.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 10:55:24 -0000

David Bremner <david@tethera.net> writes:

> Adam Majer pointed out in [1] the way were signing releases was
> unusual. Neither Carl nor I could think of a good reason for
> explicitely signing the checksum (internally of course that's what GPG
> is going anyway).

It seemed unlikely that there would be much testing for this (but feel
free!), so I have pushed it. I can fix any glitches during the next
release.

d