>>>>>>>>>>>> Daniel John Debrunner wrote (2006-05-23 14:16:42): > Bernt M. Johnsen wrote: > > > Simple (?) question. Why do we not sign snapshots that are made > > available on Derby's download page? The need for people to be sure > > that they download SW that is put there by a trusted person should be > > the same as for ordinary releases. > > Possibly because they are not official releases in any way. They are > snapshots by an individual committer, that's all.
I think it would be wise to sign snapshots anyway, since they are kind of "semi-official". They are, after all, placed on our down-load pages. And, as Knut mentions, the extra overhead should not be too much a burden for the committer. -- Bernt Marius Johnsen, Database Technology Group, Staff Engineer, Technical Lead Derby/Java DB Sun Microsystems, Trondheim, Norway
signature.asc
Description: Digital signature
