[
https://issues.apache.org/jira/browse/ARROW-558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15865998#comment-15865998
]
Julian Hyde commented on ARROW-558:
-----------------------------------
I don't think it's a good idea to put KEYS in git. If an attacker were to
compromise it they compromise the integrity of all releases. And it's pointless
including it in the release tarball.
It has to be in svn, because it has to be on the site, but there should be no
other copies.
> Add KEYS files
> --------------
>
> Key: ARROW-558
> URL: https://issues.apache.org/jira/browse/ARROW-558
> Project: Apache Arrow
> Issue Type: Task
> Reporter: Uwe L. Korn
> Assignee: Uwe L. Korn
> Priority: Blocker
>
> Yet the KEYS file is only on SVN but not in git, also I need a PMC to update
> it on the SVN, seems like I cannot do this as a committer.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
