incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bertrand Delacretaz <>
Subject Re: Publishing Maven artifacts under third-party coordinates (was: Set up Nexus staging profile for Dubbo ...)
Date Mon, 14 May 2018 18:03:26 GMT
On Thu, May 10, 2018 at 6:50 PM, Julian Hyde <> wrote:
> ...In other words, there are several ways to prove that a binary release
> is WRONG but (to Greg’s point) there is no way to prove it RIGHT....

One useful thing that people could do with binary artifacts is to say
"I use the binary with sha256 digest XYZ and it works for me" - but
that doesn't make the Apache Releases, they are still unverifiable
binaries regardless.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message