Hi, > Some historic context: https://issues.apache.org/jira/browse/LUCENE-5143
Oh, I remember! > Keep in mind that things like the solr ref guide and pylucene releases > don't do "per-release" KEY files, so completley eliminating those URLs > would require a change to those process. > > on the flip side: see Uwe's comment in that Jira questioning the rationale > of snapshoting the KEY files per-release anyway, instead of just always > using a continuously growing, automatically updated, KEYS file using LDAP > as the source of truth. I still think this is the best place, if: - People also keep their historic GPG keys on the LDAP account - There is a way to link the autogen'ed file from the website and its guaranteed to be there. I think the Apache Infra Team should change id.apache.org that only adding of keys is possible with self-service. But removing old keys should be impossible for a non-admin or some extra crosschecks. If a key really needs to be deleted, it should happen with human interaction - ensuring it was not used anywhere (at least at Apache). > I personally have no opinion, but agree the current situation is > confusing. :-( Uwe > : Date: Tue, 31 Jan 2017 00:23:46 +0100 > : From: Jan Høydahl <[email protected]> > : Reply-To: [email protected] > : To: [email protected] > : Subject: dist.apache.org - Lucene PGP KEYS files mm > : > : Hi, > : > : I noticed that in the release archives > https://archive.apache.org/dist/lucene/ there are > : several KEYS files (containing committer’s PGP public keys): > : > : https://archive.apache.org/dist/lucene/KEYS 151109b Tue, 30 > Aug > 2016 25 keys > : https://archive.apache.org/dist/lucene/java/KEYS 128519b Wed, 02 > Oct 2013 23 keys > : https://archive.apache.org/dist/lucene/solr/KEYS 139586b Tue, 30 > Aug > 2016 26 keys > : https://archive.apache.org/dist/lucene/java/6.4.0/KEYS 224469b Tue, 17 > Jan 2017 30 keys > : https://archive.apache.org/dist/lucene/solr/6.4.0/KEYS 224469b Tue, 17 > Jan 2017 30 keys > : > : Seems kind of random when the various files get updated. > : > : And why do we ever need more than the top /lucene/KEYS file? E.g. the > Hadoop project maintains > : only one top-level KEYS file http://www.apache.org/dist/hadoop/common/ > : > : Another difference in the download site is that > http://www.apache.org/dist/lucene/java/ > : has a README.html displaying below, while > http://www.apache.org/dist/lucene/solr/ has a > : HEADER.html showing above the list of downloads. > : > : Finally, when can we get rid of /tika, /nutch and /mahout folders > (redirects)? They clutter up things :) > : > : -- > : Jan Høydahl, search solution architect > : Cominvent AS - www.cominvent.com > : > : > : --------------------------------------------------------------------- > : To unsubscribe, e-mail: [email protected] > : For additional commands, e-mail: [email protected] > : > : > > -Hoss > http://www.lucidworks.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
