How to Sign a Release of OSS
What does it mean to sign a release? Who should do it? Where should the keys live? How do users verify it? Why are we even doing this again?
What does it mean to sign a release? Who should do it? Where should the keys live? How do users verify it? Why are we even doing this again?