From 23e40b3557618f0da16760683d8fd9db37a48a02 Mon Sep 17 00:00:00 2001
From: David Sheets <sheets@alum.mit.edu>
Date: Fri, 5 Jul 2013 12:15:22 +0100
Subject: [PATCH] Add a DNSSEC tarball verification note from @jedisct1 in #51

download.libsodium.org vends DNSSEC-secured SHA256 hashes of release tarballs.
---
 README.markdown | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.markdown b/README.markdown
index 88ed1ebd..46858ba1 100644
--- a/README.markdown
+++ b/README.markdown
@@ -45,6 +45,10 @@ then follow the ritual:
 Pre-compiled Win32 packages are available for download at the same
 location.
 
+Integrity of source tarballs can currently be checked using PGP or
+verified DNS queries (`dig +dnssec +short txt <file>.download.libsodium.org`
+returns the SHA256 of any file available for download).
+
 ## Comparison with vanilla NaCl
 
 Sodium does not ship C++ bindings. These might be part of a distinct