On Tue, Nov 27, 2012 at 10:55:14AM +0000, sebb wrote: > On 26 November 2012 17:41, Ralph Goers <ralph.go...@dslextreme.com> wrote: > > Traceability by who? > > > > PMC members can easily verify that what is committed to dist matches what > > they verified using what they downloaded and the MD5s that came with them. > > They are the ones responsible for the vote and the artifacts so I don't see > > a problem with that. Why you would need some sort of formal linking once > > the artifacts are published escapes me. > > The point is that using the SVN URL+revsion in the vote thread > automatically identifies a unique set of artifacts, and is a single > item to check.
That seems a welcome simplification. Regards, Gilles > [...] --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org