On 07/05/2014 01:11 PM, Mark Mielke wrote:
I might be misunderstanding this thread... but if package signing and/or message digest are not being applied to SRPM, I also agree this is a problem.
We will sign all RPMs and SRPMs that we release ... this is about the git tree.
<snip>