From general-return-6792-apmail-xml-general-archive=xml.apache.org@xml.apache.org Sat Sep 13 07:52:00 2003 Return-Path: Delivered-To: apmail-xml-general-archive@www.apache.org Received: (qmail 96477 invoked from network); 13 Sep 2003 07:52:00 -0000 Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12) by minotaur-2.apache.org with SMTP; 13 Sep 2003 07:52:00 -0000 Received: (qmail 8720 invoked by uid 500); 13 Sep 2003 07:51:29 -0000 Delivered-To: apmail-xml-general-archive@xml.apache.org Received: (qmail 8687 invoked by uid 500); 13 Sep 2003 07:51:29 -0000 Mailing-List: contact general-help@xml.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: general@xml.apache.org Delivered-To: mailing list general@xml.apache.org Received: (qmail 8662 invoked from network); 13 Sep 2003 07:51:28 -0000 Received: from unknown (HELO mta01.mail.mel.aone.net.au) (203.2.192.81) by daedalus.apache.org with SMTP; 13 Sep 2003 07:51:28 -0000 Received: from ozemail.com.au ([63.34.214.147]) by mta04.mail.mel.aone.net.au with ESMTP id <20030913051222.QWJZ26931.mta04.mail.mel.aone.net.au@ozemail.com.au>; Sat, 13 Sep 2003 15:12:22 +1000 Message-ID: <3F62A6FA.808@ozemail.com.au> Date: Sat, 13 Sep 2003 15:11:22 +1000 From: Berin Lautenbach User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030831 X-Accept-Language: en-us, en MIME-Version: 1.0 To: general@xml.apache.org CC: pmc@xml.apache.org Subject: Re: Getting all projects to sign releases - Forrest, Xindice References: <5.2.0.9.0.20030912213408.00a85208@curcuru.com> In-Reply-To: <5.2.0.9.0.20030912213408.00a85208@curcuru.com> X-Enigmail-Version: 0.76.6.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Shane, No it's not just you, and it's particularly important now that we are moving to the mirrors as we don't have control over the majority of the distribution points now. Xindice has an Md-5 hash which can be read from www.apache.org/dist which will do the trick until the next release. I just checked the dist directory and it looks like Jeff is right in the middle of uploading a new version of forrest with PGP signatures :>. Cheers, Berin Shane Curcuru wrote: > Is it just me, or don't we have a policy that all software distributions > should be PGP/GPG or equivalently signed with the release manager's > key? 8-) > > Admittedly, plus points to Forrest and Xindice since they've already > moved their distributions to the mirroring system at > www.apache.org/dist/xml/[subproject]. But I'd really like to see future > releases also get signed before they're put on the distro site. > > Thanks, > Shane > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscribe@xml.apache.org > For additional commands, e-mail: general-help@xml.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscribe@xml.apache.org For additional commands, e-mail: general-help@xml.apache.org