Proposal: cabal-install: verify OpenPGP signatures

Nikita Karetnikov nikita at
Sat May 3 00:31:55 UTC 2014

I’ve been told off-list that relying on external tools (such as GPG) may
be problematic.  Is it the case?  And if so, could you elaborate?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <>

More information about the cabal-devel mailing list