From 673fdedc04133e10f96c3b1b3b32c9b8bbc54a5b Mon Sep 17 00:00:00 2001
From: mitchell <70453897+667e-11@users.noreply.github.com>
Date: Wed, 11 Nov 2015 17:01:40 -0500
Subject: PGP sign packages for added integrity.

---
 doc/manual.md | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'doc/manual.md')

diff --git a/doc/manual.md b/doc/manual.md
index 7a60ab44..38ae50ac 100644
--- a/doc/manual.md
+++ b/doc/manual.md
@@ -150,6 +150,11 @@ You also have the option of downloading an official set of
 [language modules](#Language.Modules) from the download page. Textadept itself
 includes C/C++ and Lua language modules by default.
 
+If necessary, you can obtain PGP signatures from the [download page][] along
+with a public key in order to verify download integrity. For example on Linux,
+after importing the public key via `gpg --import foicica.pgp` and downloading
+the appropriate signature, run `gpg --verify [signature]`.
+
 [download page]: http://foicica.com/textadept/download
 
 ## Installation
@@ -1533,6 +1538,9 @@ Note: you may have to run
 if the prefix where any dependencies are installed is */usr/local/* and your
 compiler flags do not include them by default.
 
+If it matters, running `make verify-deps` after `make deps` will compare the
+downloaded dependencies with the ones Textadept was compiled against.
+
 #### Installing on Linux and BSD
 
 Textadept is self-contained, meaning you do not have to install it, and runs
-- 
cgit v1.2.3