Ublock: Sign commits & releases (tags)

[rugk]

You should consider signing git commits & releases.

• onionshare#221 (comment)
• It is also displayed on GitHub: https://github.com/blog/2144-gpg-signature-verification
• Here is GitHub's help for this: https://help.github.com/articles/generating-a-gpg-key/
• And here is how you can sign releases: https://wiki.debian.org/Creating%20signed%20GitHub%20releases

[gorhill]

Essentially duplicate of #2027.

[rugk]

No, it's not. Signing files (or git commits) and calculating hashes of files to put them in the release notes, are fundamentally different things.

Thus please reopen this issue.

[gorhill]

I will have to read about this.

[Snapy]

@gorhill The issue can be closed since you're doing it since some time. (Duplicate of #2027)

[gorhill]

@Snapy That's right, somehow I missed this one. Thanks.