cocoon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Crossley <cross...@apache.org>
Subject Re: [GT 2004] PGP key signing?
Date Sat, 23 Oct 2004 05:25:24 GMT
Torsten Curdt wrote:
> > 
> > So that people can verify the integrity of our releases.
> 
> ...because not everyone knows our keys
> are at pgp.mit.edu we ship them ...I see

There is a thread on infrastructure@a.o recently about that.
The KEYS file is just a convenience. There are probably better
ways to do it, but that gets people going quickly.

Another thing we did at Forrest was for more than one
of us to sign each release in the accompanying *.asc file.

-- 
David Crossley


Mime
View raw message