On 10/12/12 3 :18AM, "Bertrand Delacretaz" <bdelacre...@apache.org> wrote:
>On Thu, Oct 11, 2012 at 9:46 PM, Carol Frampton <cfram...@adobe.com> >wrote: >> ...We'll have to wait for one of the mentors to find out if a KEYS file >>is >> required in the source package.... > >No, I'd say having them in there is bad, as someone could mess with >both that files and the archive's signature then - people must get the >KEYS from a separate trusted source. I just double-checked the SDK and we did not include the KEYS file. Carol
