Arch Linux RFC: Dealing with package sources and digital signatures

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------RR8qcBZzuyMnQJej9mexd644
Content-Type: multipart/mixed; boundary="------------TAeEcGgObdrJwnuQcEoiIa2Y";
 protected-headers="v1"
From: Robin Candau <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Arch Linux RFC: Dealing with package sources and digital signatures

--------------TAeEcGgObdrJwnuQcEoiIa2Y
Content-Type: multipart/mixed; boundary="------------gM8rk2YFl6iDy8xcfwuKNhA4"

--------------gM8rk2YFl6iDy8xcfwuKNhA4
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64

SGVsbG8gZXZlcnlvbmUsDQoNCm9uIEFyY2ggTGludXggd2UgYXJlIG5vdyBzdGFydGluZyB0
byBkaXNjdXNzIGFuIFJGQyBbMV0sIHRoYXQgYWltcyB0byANCmVzdGFibGlzaCBzb21lIHN0
YW5kYXJkcyByZWdhcmRpbmcgdGhlIHdheSB3ZSBkZWFsIHdpdGggb3VyIHBhY2thZ2UgDQpz
b3VyY2VzIGFuZCB0aGUgd2F5IHdlIGFwcHJvYWNoIGRpZ2l0YWwgc2lnbmF0dXJlcyBmb3Ig
dGhlbS4NCg0KV2hpbGUgdGhpcyBSRkMgcHJpbWFyaWx5IHNlcnZlcyBhcyBhIGRlZmluaXRp
b24gb2Ygb3VyIGV4cGVjdGF0aW9uIA0KdG93YXJkcyB1cHN0cmVhbXMgYW5kIG91ciBwYWNr
YWdlIG1haW50YWluZXJzLCB3ZSB0aGluayBpdCBjb3VsZCBiZSBhIA0KdmFsdWFibGUgaW50
cm9zcGVjdGlvbiBmb3Igb3RoZXIgZGlzdHJpYnV0aW9ucyByZWdhcmRpbmcgdGhlIHdheSB0
aGV5IA0KZGVhbCB3aXRoIHBhY2thZ2Ugc291cmNlcyBhbmQgZGlnaXRhbCBzaWduYXR1cmVz
IGZvciB0aGVpciBwYWNrYWdlcy4NCkdlbmVyYWxseSBzcGVha2luZywgd2UgYXJlIGludGVy
ZXN0ZWQgaW4gdGhvdWdodHMgYW5kIGlucHV0IGZyb20gb3RoZXIgDQpkaXN0cmlidXRpb25z
IC8gcGFja2FnZSBtYWludGFpbmVycywgdGhhdCBmYWNlIHNpbWlsYXIgY2hhbGxlbmdlcy4N
Cg0KVGhhbmtzIGZvciBjb25zaWRlcmluZyBnaXZpbmcgaXQgYSByZWFkLg0KSGF2ZSBhIG5p
Y2UgZGF5IQ0KDQpbMV0gaHR0cHM6Ly9naXRsYWIuYXJjaGxpbnV4Lm9yZy9hcmNobGludXgv
cmZjcy8tL21lcmdlX3JlcXVlc3RzLzQ2DQoNCi0tIA0KUmVnYXJkcywNClJvYmluIENhbmRh
dSAvIEFudGl6DQoNCg==
--------------gM8rk2YFl6iDy8xcfwuKNhA4
Content-Type: application/pgp-keys; name="OpenPGP_0xFDC3040B92ACA748.asc"
Content-Disposition: attachment; filename="OpenPGP_0xFDC3040B92ACA748.asc"
Content-Description: OpenPGP public key
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP PUBLIC KEY BLOCK-----
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3D=3D
=3Di8fF
-----END PGP PUBLIC KEY BLOCK-----

--------------gM8rk2YFl6iDy8xcfwuKNhA4--

--------------TAeEcGgObdrJwnuQcEoiIa2Y--

--------------RR8qcBZzuyMnQJej9mexd644
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=IqJY
-----END PGP SIGNATURE-----

--------------RR8qcBZzuyMnQJej9mexd644--