[tor-talk] Absence of digital signature of TBB sources

[Erinn Clark]

* Robert Ransom <rransom.8774 at gmail.com> [2012:04:04 10:44 +0000]: 
> On 2012-04-04, James Brown <jbrownfirst at gmail.com> wrote:
> > Hello,
> >
> > Very sorry for creating a new topic, but that issue still don't resolve.
> > As I wrote earlier (
> > https://lists.torproject.org/pipermail/tor-talk/2012-March/023755.html )
> >   there is no digital signature of the latest sources code of the TBB.
> 
> The Git tag is signed.
> 
> The official TBBs are built from the sources in Git, not from the
> tarballs.  There probably shouldn't be any release tarballs for TBB
> source code.

Agreed. As for now, I've re-signed the current tarball, but for the next
release the website will be updated to only refer to the git tag and tarballs
will be discontinued.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 495 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120404/c4239e29/attachment.pgp>