> >> There's only a slightly problem with that approach: the Maven central >> repo is not under the ASF control, while the old traditional dist area >> is, so I guess "official" releases _must_ be placed in the ASF space. > > I agree, our releases must go to an ASF space first. However one could > say that "official" means signed by a verifiable member of the ASF, and > that's why it's important that our keys are cross signed to establish a > strong web of trust. >
+1 http://people.apache.org/~simonetripodi/ http://simonetripodi.livejournal.com/ http://twitter.com/simonetripodi http://www.99soft.org/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
