Releases are signed using GnuPG key with F06A8079 (fingerprint: 40DA 3AF2 9727 8DA2 B8E1 8D2F FCF0 B5DC F06A 8079). To verify a release download the detached GPG signature file, such as flan-[version].tar.gz and flan-[version].tar.gz.sig. Once both files are downloaded you can check the signature with gpg --verify flan.tar.gz.sig.
The main discussion list is <flan@ocelot.cascaded.org>, and is used to discuss all aspects of Flan, including development, and porting, and bug reports.
Announcements about Flan are made on <flan-announce@ocelot.cascaded.org>.
To subscribe to any Flan mailing list, please send an empty mail with a Subject: header line of just "subscribe" to the relevant -request list. For example, to subscribe yourself to the main list, you would send mail to <flan-request@ocelot.cascaded.org> with no body and a Subject: header line of just "subscribe".
Security reports that should not be made immediately public can be sent directly to the maintainer.
When replying to an e-mail in the mailing lists, please include the list as a recipient to your reply, so that discussions do not contain holes of missing information.
Please ensure your bug reports are as complete as possible. For more information, refer to "How to Report Bugs Effectively" by Simon Tatham.