On Oct 06, Otto Kekäläinen <o...@debian.org> wrote: > Also some projects release tarballs with extra additions that are not > in the same git, or they strip away directories/files that are in git, I am sure that there are counterexamples, but usually they exclude things that we want to rebuild anyway, like configure.
> Although, as stated by Simon, git signatures are based on SHA-1 so not > unbreakable anymore, but the point here is to illustrate the > git-buildpackage feature. This has been already discussed and it is not true. -- ciao, Marco
signature.asc
Description: PGP signature
