Return-Path: 
 <general-return-16277-apmail-incubator-general-archive=incubator.apache.org@incubator.apache.org>
Delivered-To: apmail-incubator-general-archive@www.apache.org
Received: (qmail 23960 invoked from network); 28 Oct 2007 18:53:33 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 28 Oct 2007 18:53:33 -0000
Received: (qmail 20840 invoked by uid 500); 28 Oct 2007 18:53:19 -0000
Delivered-To: apmail-incubator-general-archive@incubator.apache.org
Received: (qmail 20668 invoked by uid 500); 28 Oct 2007 18:53:19 -0000
Mailing-List: contact general-help@incubator.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:general-help@incubator.apache.org>
List-Unsubscribe: <mailto:general-unsubscribe@incubator.apache.org>
List-Post: <mailto:general@incubator.apache.org>
List-Id: <general.incubator.apache.org>
Reply-To: general@incubator.apache.org
Delivered-To: mailing list general@incubator.apache.org
Received: (qmail 20656 invoked by uid 99); 28 Oct 2007 18:53:19 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 28 Oct 2007 11:53:19 -0700
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of robertburrelldonkin@gmail.com
 designates 209.85.198.187 as permitted sender)
Received: from [209.85.198.187] (HELO rv-out-0910.google.com) (209.85.198.187)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 28 Oct 2007 18:53:23 +0000
Received: by rv-out-0910.google.com with SMTP id k20so1345263rvb
        for <general@incubator.apache.org>;
 Sun, 28 Oct 2007 11:53:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=beta;
        h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        bh=pZzEUY4NO9YonU0mFFP0lEzKRwbRP9eBMp90/kgZze4=;
        b=pmN+QIiV5UpfSvuYu73JSqapBniNVHU6gvDEDzIFo9Yly92s7RY0hEOnI22M7U3pgHzSEHBI4kgw9SypPmZ69laj6aCxa8CkmSkgi42O29fbR62nstcGe+5pWrTUdypViA2erKttYsZfFYXcHSHeEGktFVPU+L8mD3Zh4Xp21/Q=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=kxw7xtI15OMLRs51YzaGvvjICx4G4IpR90VnnMzHQgQcLOTEQkS5vHsEgR9ObeHqN4qR4MhLv71G8K5XIpKpw+OiWw/yay5h7fJIONTebfDiyWbTThVYbu1uIe9vw0opvb+EAQjmyv8sp6levTMZjV9W5Lp1804aHDb2JTIypHU=
Received: by 10.114.88.1 with SMTP id l1mr3905990wab.1193597581611;
        Sun, 28 Oct 2007 11:53:01 -0700 (PDT)
Received: by 10.114.80.5 with HTTP; Sun, 28 Oct 2007 11:53:01 -0700 (PDT)
Message-ID: <f470f68e0710281153p6897b76kb896c45dcc85d450@mail.gmail.com>
Date: Sun, 28 Oct 2007 18:53:01 +0000
From: "Robert Burrell Donkin" <robertburrelldonkin@gmail.com>
To: general@incubator.apache.org
Subject: Re: ASF Web of Trust [was: Release Distribution Strategy]
In-Reply-To: <F8B5BB95-E8A3-41F1-B58E-E68643A3689B@codefaktor.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <NBBBJGEAGJAKLIDBKJOPAEBJBBAD.noel@devtech.com>
	 <200710281557.34469.niclas@hedhman.org>
	 <F8B5BB95-E8A3-41F1-B58E-E68643A3689B@codefaktor.de>
X-Virus-Checked: Checked by ClamAV on apache.org

On 10/28/07, Erik Abele <erik@codefaktor.de> wrote:
> On 28.10.2007, at 08:57, Niclas Hedhman wrote:

<snip>

> > as well as tooling support for verifications.
>
> http://httpd.apache.org/dev/verification.html

IMHO verification is too important to be left to users. perhaps HTTP
could be extended by a "3xx Mirrored" response. headers could return a
list of mirrors together with hashes, signatures and links to keys.

- robert

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org