Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff

[Tom Lord]

    > From: Miles Bader <address@hidden>

    > Is there any reason why [a mirror] can't simply _copy_ the
    > checksum file, along with any gpg signature information in the
    > original archive?  That seems a lot more convenient, as well as
    > being more `correct' (who knows how much time passes between
    > commit and mirroring), and a lot more useful for pull-based
    > mirroring.

I think they're both useful under different circumstances.   Copying
will be available Real Soon Now.  Re-signing just happens to fall out
of the implementation of signing for free.

-t