From 3ba4c10adf460ea689b1a197943ae8f0910a69cc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 22 Sep 2016 08:47:06 +0200 Subject: [PATCH] Document date verification as well MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- doc/setup.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/doc/setup.rst b/doc/setup.rst index 5c73b3f1d7..773a8f144c 100644 --- a/doc/setup.rst +++ b/doc/setup.rst @@ -466,9 +466,10 @@ Some additional downloads (for example themes) might be signed by Michal Čihař and you can get more identification information from . -You should verify that the signature matches -the archive you have downloaded. This way you can be sure that you are using -the same code that was released. +You should verify that the signature matches the archive you have downloaded. +This way you can be sure that you are using the same code that was released. +You should also verify the date of the signature to make sure that you +downloaded the latest version. Each archive is accompanied with ``.asc`` files which contains the PGP signature for it. Once you have both of them in the same folder, you can verify the signature: