Last modified: 2014-09-02 09:30:46 UTC
Given that many people can access the melange release files on the server, it would be beneficial to sign the releases as is done to MediaWiki releases as well.
Can this be made part of the generation of the files? What kind of keys should be used to sign?
http://www.apache.org/dev/release-signing.html (as an example) has lots of information.