3 ms·
Does it seem odd to anyone else that for verifying integrity they distribute a GPG-signed list of SHASUMS? Why not create a GPG signature for each blob?
by discreditable 11y ago
Does it seem odd to anyone else that for verifying integrity they distribute a GPG-signed list of SHASUMS? Why not create a GPG signature for each blob?