Marcus wrote:
Am 12/08/2014 02:32 PM, schrieb Andrea Pescetti:
We could actually do both, if you believe it makes sense:
- signed 4.1.1 (next Windows binaries only) by end of December
- 4.1.2 in January
IMHO this doesn't make sense and would be just a waste of resources,
when doing 2 releases in such a short time frame.
But I would tend to do only the bigger release (4.1.2) - let's say in
January/February. When ...

Honestly, Infra would like (and they are right) that after asking for years for digital signing, we actually use it. We can't put many obstacles in front of it. So a long list of things that we must have ready before that won't work. Signing Windows binaries will have to happen, and users will benefit from it in terms of trust in OpenOffice.

Assuming that more or less we can master the technology, distributing the 4.1.1 signed binaries is not a huge feat for us (it would need production of the new binaries and their upload to a new directory like "windows-signed" and defaulting to "windows-signed" in the JavaScript in the download page). It is far less than a release and at least it could show that on this (new for OpenOffice) topic we are ready.

In case I wasn't clear (and this is my fault for not summarizing the Budapest talks correctly) signed binaries have high priority. One way is to make a 4.1.2 release and sign it, and this requires going through the whole process (no, it can't be a Windows-only release). Another way is to ship a signed version of the existing 4.1.1 binaries as a "warm up" for the moment when this will be integral part of the release process.

Regards,
  Andrea.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Reply via email to