On Wed, Jan 21, 2009 at 8:22 AM, Clement Escoffier <[email protected]> wrote: > Hi, > > The KEYS file is here : http://www.apache.org/dist/felix/KEYS > > Do we need to add it at the root of the repository? The release management > guide just say to append it to /x1/www/www.apache.org/dist/felix/KEYS.
I think it is recommended "both", and that all keys are made available on several public servers. Finally, cross key-signing between Apache committers are also recommended (should only happen in person), but not required. The /dist is for people who "just download" and never cares about the svn, but there are a bunch of developers who only go to the svn sources, as they are 'authorative' to a larger degree. Cheers Niclas -- http://www.qi4j.org - New Energy for Java
