Return-Path: Mailing-List: contact commons-dev-help@jakarta.apache.org; run by ezmlm Delivered-To: mailing list commons-dev@jakarta.apache.org Received: (qmail 48319 invoked from network); 2 Sep 2003 01:05:36 -0000 Received: from unknown (HELO ms-smtp-03.southeast.rr.com) (24.93.67.84) by daedalus.apache.org with SMTP; 2 Sep 2003 01:05:36 -0000 Received: from noel770 (cae88-16-024.sc.rr.com [24.88.16.24]) by ms-smtp-03.southeast.rr.com (8.12.5/8.12.2) with SMTP id h81M33xk024249 for ; Mon, 1 Sep 2003 18:03:03 -0400 (EDT) From: "Noel J. Bergman" To: "Jakarta Commons Developers List" Subject: RE: [doc] how to release - feedback Date: Mon, 1 Sep 2003 18:04:55 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 In-Reply-To: Importance: Normal X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N See: http://nagoya.apache.org/wiki/apachewiki.cgi?SigningReleases PGP is mentioned, but not elaborated upon. I wrote the GPG instructions. Someone who uses PGP should contribute the matching instructions. However, I do not believe that signing should be done on minotaur. It should be done on the Release Manager's personal system where (s)he has control over the private key. I don't like the idea of having private keys on minotaur. --- Noel