Please review the draft for March's report

David A. Wheeler dwheeler at
Tue Apr 6 14:39:18 UTC 2021

Press releases are not the best way to learn technical details :-).

I suggest adding a link to more details e.g.:

See <a href="“>”What is sigstore"</a> for more details.

I think mentioning sigstore is value. Reproducible builds let you verify that
a given build *is* generated from a given source; sigstore can let you
verify that you got the *correct* source or build.

--- David A. Wheeler

More information about the rb-general mailing list