|
From: Paul D. <duf...@zo...> - 2019-07-24 05:50:41
|
I am thinking about how software is/should be distributed. I believe, source code is for programmers. I believe, executable code is for users. I believe a intermediary between the two should exist. I guess it is a package. I believe this intermediary is for installer(s). I believe this intermediary should be PGP signed. What should it looks like? Unsigned:Builder PGP key Signed: Program name Program version Builder name: Build day Build hour Type of public builder source code: None, GIT_URL, included Git URL if present Believed_author Believed_author_URL for the source code Number_of_sections Optional Section_LLVM Optional Section_source_code encodings kind_of_archive archive Optional Section DOS 16 bits Optional Section DOS 32 bits |