From general-return-50326-apmail-incubator-general-archive=incubator.apache.org@incubator.apache.org Mon Jul 20 18:04:54 2015 Return-Path: X-Original-To: apmail-incubator-general-archive@www.apache.org Delivered-To: apmail-incubator-general-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B78A0188D8 for ; Mon, 20 Jul 2015 18:04:54 +0000 (UTC) Received: (qmail 84955 invoked by uid 500); 20 Jul 2015 18:04:54 -0000 Delivered-To: apmail-incubator-general-archive@incubator.apache.org Received: (qmail 84778 invoked by uid 500); 20 Jul 2015 18:04:54 -0000 Mailing-List: contact general-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: general@incubator.apache.org Delivered-To: mailing list general@incubator.apache.org Received: (qmail 84766 invoked by uid 99); 20 Jul 2015 18:04:53 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 20 Jul 2015 18:04:53 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 3BD0F189DD5 for ; Mon, 20 Jul 2015 18:04:53 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.108 X-Spam-Level: X-Spam-Status: No, score=-0.108 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_MSPIKE_H2=-1.108] autolearn=disabled Received: from mx1-us-east.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id BKN8z09v3Po4 for ; Mon, 20 Jul 2015 18:04:49 +0000 (UTC) Received: from mail-lb0-f176.google.com (mail-lb0-f176.google.com [209.85.217.176]) by mx1-us-east.apache.org (ASF Mail Server at mx1-us-east.apache.org) with ESMTPS id E339142AF1 for ; Mon, 20 Jul 2015 18:04:48 +0000 (UTC) Received: by lbbzr7 with SMTP id zr7so100231392lbb.1 for ; Mon, 20 Jul 2015 11:03:17 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=lXytHeOJcprC0CR9BAnO27B/5P9J2uFU1oF5cocEXZA=; b=JUPNUO+OoTHmEp3E8d9GvPKn9KyDRChYgL+rpvMiQSoGeN3Un21Bp9xHJURi8V6lsf gicIwp2K5hndbyIbafWKtdKyY39E0hhWPmw5ZqdjFozGKaY2ibmix7iLaW1S9eI/+2oS ap1Pjh6Li0h1HsuwHj28u+NkrDoyP4vw9wM/1CszPPGh2AggYlz3VCOphAEEHoRRagb/ F/+tBfh/7yFLIxaxKn+IUuJtHYDseI5EhwCNs+h8G/rUGouuuNHFi54RPQ5FkZ/ri3Eg VzouKHVAlIPz/RoYC5dMeokzF3Eguk6dW2wd3Bb24/Q9F7KiggfU7Y4g5irtvhWT9VSz tR0A== X-Gm-Message-State: ALoCoQnm3NxFzdowT5CfkHsBw+kiTERuQQKLdejm+NKVTzq0RCrAKOJp/vhVfK0F9y2x0zszx5V9 MIME-Version: 1.0 X-Received: by 10.152.178.229 with SMTP id db5mr15472561lac.55.1437415397222; Mon, 20 Jul 2015 11:03:17 -0700 (PDT) Received: by 10.112.130.129 with HTTP; Mon, 20 Jul 2015 11:03:17 -0700 (PDT) X-Originating-IP: [206.190.64.2] In-Reply-To: References: Date: Mon, 20 Jul 2015 11:03:17 -0700 Message-ID: Subject: Re: [VOTE] Release Apache Kylin-0.7.2-incubating From: Marvin Humphrey To: "general@incubator.apache.org" Content-Type: text/plain; charset=UTF-8 On Mon, Jul 20, 2015 at 10:33 AM, Owen O'Malley wrote: > On Sat, Jul 18, 2015 at 12:43 AM, Henry Saputra > wrote: > >> (NOTE next time probably use sha512) > > > I'd like to second the request for using sha512 and not including md5. The requirements for sums and signatures are covered in the Release Distribution Policy, established a few months ago and curated by VP Infrastructure: http://www.apache.org/dev/release-distribution#sigs-and-sums Every artifact distributed to the public through Apache channels MUST be accompanied by one file containing an OpenPGP compatible ASCII armored detached signature and another file containing an MD5 checksum. The names of these files MUST be formed by adding to the name of the artifact the following suffixes: * the signature by suffixing .asc * the checksum by suffixing .md5 An SHA checksum SHOULD also be created and MUST be suffixed .sha. The checksum SHOULD be generated using SHA512. If anyone wishes to suggest changes to the policy, the proper venue is the public list infrastructure-dev@apache. Please note that that the establishment of the Release Distribution Policy merely codified long-standing policies which had been documented in various places -- nothing has changed in many years. Marvin Humphrey --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org For additional commands, e-mail: general-help@incubator.apache.org