Andrus Adamchik wrote:
> On Sep 18, 2006, at 10:38 PM, Jean T. Anderson wrote:
...
>> I notice that recent incubator releases have the md5 sigs
>> (http://people.apache.org/dist/incubator/tuscany/incubating-M1/ ,
>> http://people.apache.org/dist/incubator/stdcxx/releases/ ,
>> http://people.apache.org/dist/incubator/harmony/snapshots/ ) so that
>> might be another thing to look into (more info is at
>> http://www.apache.org/dev/release-signing.html)
>
> When we finish the review, I'll post the new release with the
> signatures. Although my PGP key is not known to anybody, defeating the
> purpose of signing. So I guess we can limit this to just MD5's.
I'd encourage you to go ahead and sign it anyhow (and upload your public
key to people.apache.org).
http://www.apache.org/dev/new-committers-guide.html#pgp points to
henkp's page. He has a fascinating link to the apache web of trust. It
looks to me like some other committers who have signed releases also
don't have their key signed by anyone in the apache web. At any rate,
don't let that stop you from signing it.
If any cayenne committers will be at ApacheCon in Austin next month, be
sure to attend the key signing -- it's usually the evening of the first
day of the conference.
This is getting a little off topic, but has cayenne set up a KEYS file
yet? --That's also mentioned at
http://www.apache.org/dev/new-committers-guide.html#pgp .
-jean
This archive was generated by hypermail 2.0.0 : Tue Sep 19 2006 - 18:05:04 EDT