[arch-general] ensuring integrity of sources (was: [arch-dev-public] todo list for moving http -> https sources)

[Allan McRae]

On 01/11/16 03:14, Bennett Piater wrote:
> On 10/31/2016 06:04 PM, Levente Polyak wrote:
>> On the other side we have a dev/TU authenticating the buildscript.
>> Both cover certain areas but are still independent and one does not make
>> the other futile.
> 
> Since this thread is helpfully on arch-general now, I want to quickly
> chime in and say that I would really like authenticated buildscripts at
> some point :)
> 

I would like some bourbon.

Allan




* It might appear unrelated, but I can spend time on pacman/makepkg if I
don't have to work for bourbon.  Then again, bourbon reduces the quality
of my coding after a point...

** makepkg --source --sign