Took a bit to figure out how we are going to integrate this into our workflow, but we agree this would be a good idea and will start signing release tags soon. Cheers, Gerwin On 30.07.2014, at 11:43 am, HW42 wrote:

Hi,

I really like to see big formally verified software.

But it seems your provide no way to verify the downloads from your repositories. I think you should use signed git tags and also ensure that repo verify those.

HW42 _______________________________________________ Devel mailing list Devel@sel4.systems https://sel4.systems/lists/listinfo/devel