search

katzenpost / docs

specification and design documents
Creative Commons Attribution Share Alike 4.0 International
53 stars 14 forks source link

make release process use gpg #33

Open david415 opened 6 years ago

david415 commented 6 years ago

(i mean... it almost makes me wanna say that we should sign all of our git commits)

we should use annotated git tags. that is to say, git tags with more information associated with them, including a gpg signature. ok so in that case we should have a release signing key and an offline master release signing key. or what?