Neil Conway <neilc@samurai.com> writes:
> I think we should PGP sign all the "official" packages that are provided
> for download from the various mirror sites.
This is probably a good idea.
> I'd volunteer to do the work myself, except that it's pretty closely
> intertwined with the release process itself...
Marc would have to be the guy who actually generates the tarball
signatures. But you could possibly help him get the procedure set up,
if he's not familiar with it already...
regards, tom lane