Git based releases

[Yawar Amin]

On 2013-05-19, at 11:54, Geert Janssens <janssens-geert at telenet.be> wrote:

> [...]
> 
> Yours would generate an unsigned annotated tag. In the git-tag man page I found we could 
> also generate signed tags using -s or -u.
> 
> I don't know the (dis)advantages of both methods and which one we should use then.

Signed is better for a release. Unsigned can be removed any time by anyone, without a trace. Signed gives us an audit trail.

Not to mention the benefit of a tag with a trusted OpenPGP signature.

ZZ