On 2020-07-12, Rob Tompkins wrote: > given the consistency of the signatures from the plugins…do we need to > check them for releases anymore?
Yes, please. Not everybody uses the plugins and even if everybody did a misconfiguration could be pulling in the wrong key or a key not available from the expected download location. Stefan --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
