Sign checksums, not files.

This commit is contained in:
Jakob Borg
2014-08-13 12:52:04 +02:00
parent 60d0ef93ac
commit 3c9165d295
2 changed files with 3 additions and 14 deletions

View File

@@ -33,8 +33,9 @@ Signed Releases
---------------
As of v0.7.0 and onwards, git tags and release binaries are GPG signed with
the key BCE524C7 (http://nym.se/gpg.txt). The signature is included in the
normal release bundle as `syncthing.asc` or `syncthing.exe.asc`.
the key BCE524C7 (http://nym.se/gpg.txt). For release binaries, MD5 and
SHA1 checksums are calculated and signed, available in the
md5sum.txt.asc and sha1sum.txt.asc files.
Documentation
=============