On Oct 25, 2017, at 12:14, Simon Hanna <si...@hannaweb.eu> wrote: > > I guess more important would be to sign the releases. At least archlinux > likes to have signatures for source archives and often requests upstream > projects to add this.
Definitely. I (try to remember to) sign both tags and releases for Core. > Another thing that just came to mind: how does commit squashing work? You'll > probably have to do that offline and not use gitlabs autosmashing… I would think that squash merges would destroy the record of any intermediate signed commits. Core doesn’t have a firm policy either way; sometimes I squash merge sometimes not. I’m philosophical opposed to squash merging, but git often really makes me want to do it anyway. -Barry
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Mailman-Developers mailing list Mailman-Developers@python.org https://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-developers%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://wiki.list.org/x/QIA9
