4 Oct
2014
4 Oct
'14
9:27 a.m.
04.10.2014, 06:09, "Karol Babioch" <karol@babioch.de>:
Use GPG to verify the integrity of the download and calculate the checksum locally for yourself. Users of your package have to trust you anyway, as you can basically do anything to your package, anyway.
Best regards, Karol Babioch
OK, you have a point, understood. Tx. @ Charles Bos: ^^^ the logic I was missing. Tx.