Release notes are committed into the git repo, in the RELEASE-NOTES file, and distributed as part of the release tarballs.
We don't consider the "github releases" feature to be safe enough. Anyone with write permissions on the git repo can edit existing "releases" or create new ones, so compromising a single account or blackmailing a single person would be sufficient to put malicious binaries there. In contrast, the electrum(.)org website is set up to be safe from single-account compromise.
(see "Website and release security" at https://electrum.org/#about )
ghost43 / SomberNight
npub1d4…nlal7
2026-09-12 18:27:55 UTC
in reply to nevent1q…mjfx
Author Public Key
npub1d4fhy4egr6yxqg3useqsa6tzwaq4v53sn0e30c3lglhv3475qapsrnlal7Published at
2026-09-12 18:27:55 UTCEvent JSON
{
"id": "b156fd7102b86f64c40a4d14c84f8dd5bd7533f9de1e6c5ab35d29fbb62c7f23",
"pubkey": "6d537257281e8860223c86410ee96277415652309bf317e23f47eec8d7d40743",
"created_at": 1789237675,
"kind": 1,
"tags": [
[
"e",
"633ecab9e7b2f9f51d270bd2d4c26accda33691eb5e7d0dcd80c8e4fe2748e5a",
"wss://nos.lol/",
"root",
"1027fd5bc3b5e50c9800d48bc8acfbc290d89b857c7ce15572a57048c4c0558e"
],
[
"e",
"cd68907f802b4342a42ee0d8d6bf88e558ce01994e572b99826dfd8fdc8c1087",
"wss://nos.lol/",
"reply",
"c3c7122c63af5281fee3b9338d10ae65b166ffe6f73f1c272c5c1120607731d7"
],
[
"p",
"1027fd5bc3b5e50c9800d48bc8acfbc290d89b857c7ce15572a57048c4c0558e",
"wss://nos.lol/"
],
[
"p",
"c3c7122c63af5281fee3b9338d10ae65b166ffe6f73f1c272c5c1120607731d7",
"wss://relay1.sdbitcoiners.com/nostrrelay/id"
],
[
"r",
"https://electrum.org/#about"
],
[
"client",
"Amethyst"
]
],
"content": "Release notes are committed into the git repo, in the RELEASE-NOTES file, and distributed as part of the release tarballs.\n\nWe don't consider the \"github releases\" feature to be safe enough. Anyone with write permissions on the git repo can edit existing \"releases\" or create new ones, so compromising a single account or blackmailing a single person would be sufficient to put malicious binaries there. In contrast, the electrum(.)org website is set up to be safe from single-account compromise.\n(see \"Website and release security\" at https://electrum.org/#about )",
"sig": "c377b2e4f3a4e59f7c2661e6b386223998d85b09a8127919cad00d0c6d337864bba76d7d5fdd180615fa61012734a02894f77efc9ea3049e42c9863d0e674ebc"
}