Return-Path: X-Original-To: apmail-incubator-general-archive@www.apache.org Delivered-To: apmail-incubator-general-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E38BB4EB7 for ; Mon, 27 Jun 2011 19:58:34 +0000 (UTC) Received: (qmail 41647 invoked by uid 500); 27 Jun 2011 19:58:33 -0000 Delivered-To: apmail-incubator-general-archive@incubator.apache.org Received: (qmail 41399 invoked by uid 500); 27 Jun 2011 19:58:33 -0000 Mailing-List: contact general-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: general@incubator.apache.org Delivered-To: mailing list general@incubator.apache.org Received: (qmail 41391 invoked by uid 99); 27 Jun 2011 19:58:33 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 27 Jun 2011 19:58:33 +0000 X-ASF-Spam-Status: No, hits=0.0 required=5.0 tests=DOS_RCVD_IP_TWICE_B,MSGID_FROM_MTA_HEADER,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [66.112.202.4] (HELO mail.devtech.com) (66.112.202.4) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 27 Jun 2011 19:58:25 +0000 Message-ID: MIME-Version: 1.0 X-MessageIsInfected: false Received: from mail.devtech.com. ([66.112.202.4]) by mail.devtech.com (JAMES SMTP Server 2.3.1-dev) with SMTP ID 1003 for ; Mon, 27 Jun 2011 15:58:04 -0400 (EDT) From: "Noel J. Bergman" To: Subject: RE: KEYS and releases Date: Mon, 27 Jun 2011 15:58:04 -0400 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6109 Importance: Normal In-Reply-To: <3BB424E5-0060-4AA1-91C4-CF6F93423708@jpl.nasa.gov> X-Virus-Checked: Checked by ClamAV on apache.org > we copy a KEYS file into that directory upon succesful VOTE of the release > artifacts (which also include the KEYS file). Perhaps, but the point we're getting at was explicitly stated by Benson, "The goal here is to allow and encourage consumers to independently verify signatures. That calls for KEYS somewhere else than inside the package." --- Noel --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org For additional commands, e-mail: general-help@incubator.apache.org