tree d6bd7c447d7f23e2f42d5712ad1e1667197ae334
parent a9c81252e0db470509cb4f618ffeb7c12d4ed37a
author Jonathan Nieder <jrnieder@gmail.com> 1548636898 -0800
committer Jonathan Nieder <jrnieder@gmail.com> 1548636898 -0800

debian/watch: Download upstream source more securely

Use https instead of http for transport for transport-layer privacy
and integrity protection.  More importantly, specify pgpsigurlmangle
and a signing key to allow "uscan" to check that the tarball was
genuinely released by Lasse Collin.

Based on advice from Policy 4.11.

While we're here, use the XZ compressed tarball, since it's a little
smaller.