[Twisted-Python] Release questions

[Glyph]

On Apr 4, 2013, at 9:53 AM, exarkun at twistedmatrix.com wrote:

> On 04:00 pm, therve at free.fr wrote:
>> Le 04/04/2013 13:14, exarkun at twistedmatrix.com a écrit :
>>> On 10:18 am, therve at free.fr wrote:
>>>> OK. I've opened http://pad.lv/1164403 for the required changes in our
>>>> tool. I'll update the release document once that's done.
>>> 
>>> Hm.  As far as the download/release trac macro goes, the purpose of 
>>> this
>>> to to generate links with md5 hashes for easy_install and similar 
>>> tools.
>>> It should continue to operate with md5, not be switched to sha.
>> 
>> I realized that while looking at the code more in depth. So should we
>> just publish an additional list of sha sums?
> 
> Sounds like a step in the right direction.

Would it actually break the existing macro to just include the sha sums inside the same signature list?  Presumably it has some way of ignoring the GPG signature lines; could that just be modified to ignore the shasum lines as well?

I ask because it would be nice to avoid giving the release manager two things to sign.  However, if not; still definitely a step in the right direction.

-glyph