incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bertrand Delacretaz <bdelacre...@apache.org>
Subject Re: Robot vs. personal KEYS for signing releases
Date Mon, 08 Jun 2015 13:31:58 GMT
Hi,

On Mon, Jun 8, 2015 at 2:55 PM, C├ędric Champeau
<cedric.champeau@gmail.com> wrote:
> Well I guess the debate is because of Groovy and our use of robot keys, so
> "should" vs "must". If it's a should, I think we're ok...

Would it be possible to sign the robot keys with your own keys?

The alternative is to sign the release archive with your own key, in
addition to the robot's signature - AFAICS for Groovy that's a single
file to sign.

-Bertrand

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message