[python-ldap] signed releases

[Philipp Gesang]

Hey guys,

the official(?) repo doesn’t appear to have signed tags and the
tarballs [1] are not accompanied by signature files either.
Consequently it’s not easy to establish the provenance of
releases.

Would it be possible to provide signed release tarballs or at
least sign release tags?

Please Cc: me, as I’m not subscribed.

Thank you,
Philipp

[0] https://github.com/python-ldap/python-ldap/
[1] E. g. https://github.com/python-ldap/python-ldap/releases/tag/python-ldap-3.1.0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/python-ldap/attachments/20190125/8ce25e6d/attachment.sig>