Re: How to validate source trustworthiness

2016-06-24 Thread Willy Tarreau
On Wed, Jun 22, 2016 at 09:30:53AM -0400, Danny Fullerton wrote: > Hello, > > I'm trying to validate haproxy sources but git tags doesn't seems to be > signed using PGP and the HTTPS certificate is self signed. > > Providing a signed commit/tags or, at the very least, using a valid TLS >

How to validate source trustworthiness

2016-06-22 Thread Danny Fullerton
Hello, I'm trying to validate haproxy sources but git tags doesn't seems to be signed using PGP and the HTTPS certificate is self signed. Providing a signed commit/tags or, at the very least, using a valid TLS certificate would do the job (it's now free with letsencrypt.org). regards, --