# Upstream does not sign tarballs. Discussing that, though.
bucklespring source: debian-watch-does-not-check-openpgp-signature
