The source of the key, and whose it is, must be removed from private knowledge, since this is intended for users of the release who are not on the project. Those who obtain the release from the Apache location for it will not be subscribers to dev@ or necessarily have any other source of information and are not expected to have to search dev@ for essential information.
The point is that KEYS is part of the documented practice for releases and reviewers will look for it. That is the last time I will say that here. I am attempting to support this release being successful on Apache terms. I would like that understood. - Dennis -----Original Message----- From: Peter Kelly [mailto:pmke...@apache.org] Sent: Tuesday, August 18, 2015 22:49 To: dev@corinthia.incubator.apache.org Subject: Re: [DISCUSS][PRE-VOTE] Release candidate 0.1 [ ... ] Or we could just use Jan’s public key as has been discussed ad infinitum on the list already. — Dr Peter M. Kelly pmke...@apache.org PGP key: http://www.kellypmk.net/pgp-key <http://www.kellypmk.net/pgp-key> (fingerprint 5435 6718 59F0 DD1F BFA0 5E46 2523 BAA1 44AE 2966)