On Wed, Jan 15, 2014 at 3:07 AM, Bas Couwenberg wrote: > * Add lintian override for debian-watch-may-check-gpg-signature, > upstream doesn't provide signatures for verification.
The only time it is appropriate to override this tag is when you have asked upstream to sign their tarballs and they have explicitly rejected this. The override should have a comment mentioning this and the URL of the rejection email. When you contact upstream, please mention the OpenPGP best practices. https://we.riseup.net/riseuplabs+paow/openpgp-best-practices -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
