GPG signature / checksums for released artifacts should be provided. #2867
Labels
need/author-input
Needs input from the original author
need/triage
Needs initial labeling and prioritization
Hepp!
I have no way of verifying that that the released artifacts, eg. ipfs-desktop-0.38.0-linux-amd64.deb is actually provided by you. At the very least the checksums should be provided and the list of checksums should be signed.
Preferably the artfacts should be properly signed when possible :-)
The text was updated successfully, but these errors were encountered: