On Thu, Oct 11, 2012 at 9:46 PM, Carol Frampton <cfram...@adobe.com> wrote: > ...We'll have to wait for one of the mentors to find out if a KEYS file is > required in the source package....
No, I'd say having them in there is bad, as someone could mess with both that files and the archive's signature then - people must get the KEYS from a separate trusted source. -Bertrand
