I could attempt to justify why ASF uses sha256 (or higher) and PGP for
its releases, but suffice to say that's just just how ASF does
releases and it's not negotiable.
On Wed, Mar 8, 2023 at 2:38 PM Bertil Chapuis wrote:
>
> This is a good list of points and pointers. It will take some time to ad
Sounds good, let’s focus on implementing a release process conform to Apache's
guidelines.
> On 9 Mar 2023, at 10:52, Julian Hyde wrote:
>
> I could attempt to justify why ASF uses sha256 (or higher) and PGP for
> its releases, but suffice to say that's just just how ASF does
> releases and it'
