Mailing-List: contact dev-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jakarta Commons Developers List" <dev@commons.apache.org>
Received-SPF: pass (nike.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;
  b=SGAp6vcLpTw4fBM7TwurFe4JXcoyMlykOTbCcrvIIWzzEzXw9V9u34x7uAsqy9+1hS3EBX5WhcC5lKeiO+9FVL9x2vFTdXTKeGqL4L/M1iK4cew3eqRZvK530Pih62phpkpg5u8jA5ldqGe/TtzJ2aNl0lVFRMjhQ/oBqD0FJPU=;
Date: Wed, 23 Apr 2008 12:15:10 -0700 (PDT)
From: Matt Benson <gudnabrsam@yahoo.com>
Subject: Re: [all] releases
To: Jakarta Commons Developers List <dev@commons.apache.org>
In-Reply-To: <38BB8F85-99DE-4078-B8FD-352FA37D5D5E@apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-ID: <969218.48683.qm@web55114.mail.re4.yahoo.com>


--- Torsten Curdt <tcurdt@apache.org> wrote:

> > How would that work logistically?  I publish RC
> > artifacts, and once they're voted on, you sign the
> > same artifacts that presumably you personally
> > reviewed?  Doesn't that necessarily force us -not-
> to
> > use the full mvn process?
> 
> Indeed - that's would mean not using the gpg maven
> plugin
> 
> >> Let's get him signed :)
> >
> > I have seen mentioned the idea of getting a
> signing
> > done without a F2F.
> 
> Why? Where are you located? Antarctica? ;-)

Might as well be... TN, USA.  Don't know of any other
committers in the area.

> 
> >  If anyone has ideas on how to
> > make this secure, I'm all ears.  Otherwise, how
> many
> > signatures are needed?  Or does it just depend on
> how
> > strongly trusted (how many signatures IT has)  a
> given
> > signature is?
> 
> I'd think a signature from just a few apache folks
> would do.
> 

There are a couple of committers within a few hours of
me, I know, if I needed to get my key signed; however
given your "I'll shut up" comment later on this thread
I suppose I won't worry about it either for now.  :) 
Maybe next year's Apachecon US won't be in the murder
capital of the nation (I hate ATL too, which is why I
didn't make last year's).

-Matt

> cheers
> --
> Torsten
> 
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> dev-unsubscribe@commons.apache.org
> For additional commands, e-mail:
> dev-help@commons.apache.org
> 
> 


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org