On Tue, Nov 27, 2012 at 10:55:14AM +0000, sebb wrote:
> On 26 November 2012 17:41, Ralph Goers <ralph.go...@dslextreme.com> wrote:
> > Traceability by who?
> >
> > PMC members can easily verify that what is committed to dist matches what 
> > they verified using what they downloaded and the MD5s that came with them.  
> > They are the ones responsible for the vote and the artifacts so I don't see 
> > a problem with that.  Why you would need some sort of formal linking once 
> > the artifacts are published escapes me.
> 
> The point is that using the SVN URL+revsion in the vote thread
> automatically identifies a unique set of artifacts, and is a single
> item to check.

That seems a welcome simplification.


Regards,
Gilles

> [...]

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to