This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Signature verification problem...

* Gabriel Dos Reis:

> That looks to me to be a good suggestion -- the keys would
> be those of people "authorized" to upload GCC on ftp.gnu.org
> and I believe all of them have signed GGC tarballs as of today.

The fingerprint of the key used to sign releases should also be
included in the printed manuals.

PGP signing of releases is usually not very helpful.  For example,
would you trust an Apache release which is signed by a Rodent of
Unusual Size? 8-)
Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]