Re: [PATCH] Document tarball signing

On Tue, Nov 22, 2005 at 04:12:52PM -0600, kfogel@collab.net wrote:
> mark benedetto king <mbk@lowlatency.com> writes:
> > Should we independently export and verify that the release tarball
> > is a true copy of the tag before signing?
>
> I actually diff it against the release branch and make sure (with
> Emacs' help, esp M-x delete-non-matching-lines) that all differences
> are expected and innocuous. I suppose I could diff against the tag
> too.

Right, a branch WC is more likely to be handy, and your process serves
the same purpose. Perhaps we should make this an explicit step,
though, so that signers understand what their signature should entail.

--ben

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Nov 23 00:43:23 2005