tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Remy Maucherat <r...@apache.org>
Subject Re: New 6.0.x build
Date Wed, 08 Nov 2006 12:55:00 GMT
Mark Thomas wrote:
> Remy Maucherat wrote:
>> Filip Hanik - Dev Lists wrote:
>>> sure, where do you have them, or do you want me to run a build against
>>> the tag?
>> The usual location at www/www.apache.org/dist/tomcat-6/v6.0.1. For the
>> next build, I'll have a new key, and I'll be using gpg instead.
> 
> We should not be signing things other people have uploaded to a public
> area. The signer has no way of verifying the build integrity which
> defeats the whole object of signing.
> 
> Builds should be performed in a private area, signed and then uploaded.

Ok, ok, I'll sign the build. However, I still prefer doing the signing 
on people.apache.org.

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message