Return-Path: X-Original-To: apmail-incubator-bigtop-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-bigtop-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B15D198CD for ; Tue, 21 Feb 2012 19:22:32 +0000 (UTC) Received: (qmail 55050 invoked by uid 500); 21 Feb 2012 19:22:32 -0000 Delivered-To: apmail-incubator-bigtop-dev-archive@incubator.apache.org Received: (qmail 54973 invoked by uid 500); 21 Feb 2012 19:22:32 -0000 Mailing-List: contact bigtop-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: bigtop-dev@incubator.apache.org Delivered-To: mailing list bigtop-dev@incubator.apache.org Received: (qmail 54949 invoked by uid 99); 21 Feb 2012 19:22:31 -0000 Received: from minotaur.apache.org (HELO minotaur.apache.org) (140.211.11.9) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 21 Feb 2012 19:22:31 +0000 Received: from localhost (HELO [172.29.15.235]) (127.0.0.1) (smtp-auth username bmahe, mechanism plain) by minotaur.apache.org (qpsmtpd/0.29) with ESMTP; Tue, 21 Feb 2012 19:22:31 +0000 Message-ID: <4F43EEF7.6010600@apache.org> Date: Tue, 21 Feb 2012 11:22:31 -0800 From: =?ISO-8859-1?Q?Bruno_Mah=E9?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.1) Gecko/20120209 Thunderbird/10.0.1 MIME-Version: 1.0 To: bigtop-dev@incubator.apache.org Subject: Signing our convenience artefact? Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi, I have a question for our mentors: As part of the incoming Apache Bigtop (incubating) release, I am interested in starting to sign our convenience packages/repositories. I am afraid using the release manager key to sign released convenience packages/repositories would bring too much issues to be managed since it may change for each release. So what is Apache stance on using a release key to be shared between release managers or some other entity? Note that this only applies to the convenience package/repositories, not the release itself. Thanks, Bruno