Re: svn commit: r13872 - trunk

--On Sunday, April 3, 2005 11:50 AM +0100 Max Bowsher <maxb@ukf.net> wrote:

> Is signing supposed to assert "I have tested this"?
> If so, shouldn't signing be a manual process?

Well, it's an optional flag. Typically, the RM tests the release locally
before posting it anywhere. Yet, I find signing the tarball at that initial
stage is a good way to ensure that the tarball doesn't change once testing
starts. The MD5 and sha1 sums aren't saved to a file, so there's no record of
them except for being in the output of dist.sh. With the .asc file present,
the RM can easily check the validity of the just created tarball. -- justin

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sun Apr 3 18:23:12 2005