Atomicorp

Hi,

The daily modsecurity rules tarballs used to have a .asc file available with them with a PGP signature for the file, but now I can't find that .asc file (I use it to check that the modsec rules are valid). Are they intentionally no longer signed?

Thanks,
David

For the moment yes they are disabled. For infrastructure/update speed reasons the archives are generated on the mirrors. We'll probably augment this with sha512 hashes like we do with the installers.