Issue 272: Crypto++ and Release Signing

[Jeffrey Walton]

Hi Everyone,

We are looking for feedback on Issue 272, https://github.com/weidai11/cryptopp/issues/272 .

Jeff

[Andrew Marlow]

I agree that signing a release is a good idea. Some corporations are trying to introduce signing, both for their own products and any third party components that those products use.

I note that the OpenSSL download page has a PGP sign as well as the usual checksums. A GPG (rather than PGP) sign would be good for Cryptopp.