incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mattmann, Chris A (388J)" <>
Subject Re: KEYS and releases
Date Mon, 27 Jun 2011 20:15:09 GMT
On Jun 27, 2011, at 12:58 PM, Noel J. Bergman wrote:

>> we copy a KEYS file into that directory upon succesful VOTE of the release
>> artifacts (which also include the KEYS file).
> Perhaps, but the point we're getting at was explicitly stated by Benson,
> "The goal here is to allow and encourage consumers to independently verify
> signatures.  That calls for KEYS somewhere else than inside the package."

Right, and the point I was getting at was that in Gora, we encourage both.

As a consumer of software, it's nice to have the keys right there with the release package
too, so 
I don't have to go anywhere else rather than where I'm at (my machine) to verify the KEYS
that came along with the release tarball.


Chris Mattmann, Ph.D.
Senior Computer Scientist
NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA
Office: 171-266B, Mailstop: 171-246
Adjunct Assistant Professor, Computer Science Department
University of Southern California, Los Angeles, CA 90089 USA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message