Le 28/03/2013 16:15, Simone Tripodi a écrit : > There's only a slightly problem with that approach: the Maven central > repo is not under the ASF control, while the old traditional dist area > is, so I guess "official" releases _must_ be placed in the ASF space.
I agree, our releases must go to an ASF space first. However one could say that "official" means signed by a verifiable member of the ASF, and that's why it's important that our keys are cross signed to establish a strong web of trust. Emmanuel Bourg
smime.p7s
Description: Signature cryptographique S/MIME
