From 673fdedc04133e10f96c3b1b3b32c9b8bbc54a5b Mon Sep 17 00:00:00 2001
From: mitchell <70453897+667e-11@users.noreply.github.com>
Date: Wed, 11 Nov 2015 17:01:40 -0500
Subject: PGP sign packages for added integrity.

---
 doc/index.html | 1 +
 doc/manual.md  | 8 ++++++++
 2 files changed, 9 insertions(+)

(limited to 'doc')

diff --git a/doc/index.html b/doc/index.html
index 8d8f4c75..ac131caf 100644
--- a/doc/index.html
+++ b/doc/index.html
@@ -73,6 +73,7 @@
         <ul>
           <li><a href="http://foicica.com/hg/textadept">Source</a></li>
           <li><a href="CHANGELOG.html">Other versions</a></li>
+          <li><a href="CHANGELOG.html">PGP signatures</a></li>
         </ul>
 
         <h2>Nightly<a href="#nightly">*</a> Builds</h2>
diff --git a/doc/manual.md b/doc/manual.md
index 7a60ab44..38ae50ac 100644
--- a/doc/manual.md
+++ b/doc/manual.md
@@ -150,6 +150,11 @@ You also have the option of downloading an official set of
 [language modules](#Language.Modules) from the download page. Textadept itself
 includes C/C++ and Lua language modules by default.
 
+If necessary, you can obtain PGP signatures from the [download page][] along
+with a public key in order to verify download integrity. For example on Linux,
+after importing the public key via `gpg --import foicica.pgp` and downloading
+the appropriate signature, run `gpg --verify [signature]`.
+
 [download page]: http://foicica.com/textadept/download
 
 ## Installation
@@ -1533,6 +1538,9 @@ Note: you may have to run
 if the prefix where any dependencies are installed is */usr/local/* and your
 compiler flags do not include them by default.
 
+If it matters, running `make verify-deps` after `make deps` will compare the
+downloaded dependencies with the ones Textadept was compiled against.
+
 #### Installing on Linux and BSD
 
 Textadept is self-contained, meaning you do not have to install it, and runs
-- 
cgit v1.2.3