tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject Re: New 6.0.x build
Date Wed, 08 Nov 2006 12:19:47 GMT
Remy Maucherat wrote:
> Filip Hanik - Dev Lists wrote:
>> sure, where do you have them, or do you want me to run a build against
>> the tag?
> The usual location at www/ For the
> next build, I'll have a new key, and I'll be using gpg instead.

We should not be signing things other people have uploaded to a public
area. The signer has no way of verifying the build integrity which
defeats the whole object of signing.

Builds should be performed in a private area, signed and then uploaded.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message