Re: [gentoo-user] Re: All sorts of digest verification failures

[Rich Freeman]

On Mon, Nov 16, 2015 at 4:49 PM, Marc Joliet <mar...@gmx.de> wrote:
>
> Don't forget that in Gentoo all commits are also GPG signed.
>

Sure, but to be fair those signatures are only bound to the content of
the commit by an sha1 hash.

-- 
Rich