#7544: GHC downloads are unsigned --------------------------------------------+--------------------------- Reporter: afcowie | Owner: Type: feature request | Status: closed Priority: normal | Milestone: 7.10.1 Component: Build System | Version: 7.6.1 Resolution: fixed | Keywords: Operating System: Unknown/Multiple | Architecture: Other Type of failure: Documentation bug | Difficulty: Unknown Test Case: | Blocked By: Blocking: | Related Tickets: Differential Revisions: | --------------------------------------------+--------------------------- Comment (by hvr): Replying to [comment:5 nomeata]:

GPG signatures would still be nice. For example uscan, the tool Debian uses to download upstream tarballs, can automatically verify them by including the corresponding key in the Debian packaging meta-data.

fwiw, the announcement contained GPG-signed hashes: http://www.haskell.org/pipermail/glasgow-haskell- users/2014-July/025105.html -- Ticket URL: http://ghc.haskell.org/trac/ghc/ticket/7544#comment:6 GHC http://www.haskell.org/ghc/ The Glasgow Haskell Compiler