On Fri, Dec 13, 2019 at 10:55:34AM +0100, Thomas Koch wrote:
> I'm packaging nix: https://nixos.org/releases/nix/latest
> It releases 3 files:
> nix-2.3.1.tar.xz.asc - which signs the .sha256

Why does this not contain a signature of the file itself?  The correct
filename for this schema would be nix-2.3.1.tar.xz.sha256.asc.

> nix-2.3.1.tar.xz.sha256 - which contains the hash of the tarball
> nix-2.3.1.tar.xz

Regards,
Bastian

-- 
You can't evaluate a man by logic alone.
                -- McCoy, "I, Mudd", stardate 4513.3

Reply via email to