> What you are telling, it seems, is that there is a key practice at > Apaache, amazing!
Distributions are to be signed. Individuals jars aren't code signed,
though. There is on-going work to establish an ASF Certificate Authority
server, and that will help to further the authenticated infrastructure.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
