On 23 April 2018 at 11:04, Mukul Gandhi <muk...@apache.org> wrote:
> On Sun, Apr 22, 2018 at 3:19 PM, sebb <seb...@gmail.com> wrote:
>
>> Contains MD5 hashes; these are deprecated and should be removed.
>
>
> I alone can't decide on this (though I sort of agree with you). Lets see how
> others react to the topic of having or not having MD5 hashes, and we can
> accordingly finalize as this voting concludes.

The ASF policy was updated recently, as notified to the PMC at the
beginning of March:

https://lists.apache.org/thread.html/d11f3dbcfe844b4d1eb06ba09c9f533bfbbc1f0a1a808185984832f6@%3Cprivate.xerces.apache.org%3E

>>
>>
>> Also the revision is needed for traceability; currently it is
>>
>> Last Changed Rev: 26447
>
>
> If we look at this page,
> https://dist.apache.org/repos/dist/dev/xerces/j/2.12.0/ it says on top,
> "dist - Revision 26466: /dev/xerces/j/2.12.0"
>
> Are you talking about the revision number I've marked in bold emphasis? Do
> you require mentioning this revision number in voting mails (along side the
> link, https://dist.apache.org/repos/dist/dev/xerces/j/2.12.0/) ?

Yes, it needs to be in the email so one can trace the provenance later
if necessary.
This is particularly true of /dist/dev/ URLs as those are generally
moved / deleted after use.
And indeed re-used, as here.

>
>
>
> --
> Regards,
> Mukul Gandhi

---------------------------------------------------------------------
To unsubscribe, e-mail: j-users-unsubscr...@xerces.apache.org
For additional commands, e-mail: j-users-h...@xerces.apache.org

Reply via email to