On 06/10/2012, at 2:30 AM, Chip Childers <[email protected]> wrote:
> On Fri, Oct 5, 2012 at 12:23 PM, Chip Childers > <[email protected]> wrote: >> On Fri, Oct 5, 2012 at 12:16 PM, Brett Porter <[email protected]> wrote: >>> Hi Alex, >>> >>> On 06/10/2012, at 12:54 AM, Alex Huang <[email protected]> wrote: >>> >>>> Please follow the test procedure before voting: >>>> >>>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudStack+4.0+test+procedure >>> >>> I noticed the instructions rely on importing keys from a key server, after >>> downloading the KEYS file. Wouldn't it be better to import the KEYS file >>> directly instead? >> >> Brett, >> >> I followed the CouchDB test procedure document [1] as the template for >> that verification step. Is it more common to use the KEYS file? >> >> -chip >> >> [1] http://wiki.apache.org/couchdb/Test_procedure > > I also note that the httpd project suggests the key server as well: > > http://httpd.apache.org/dev/verification.html > Good point - though it then goes onto a lengthy discussion about how you can't trust it until you verify the key, by meeting Sander, etc. :) - Brett
