kgiusti opened a new pull request #1215:
URL: https://github.com/apache/qpid-dispatch/pull/1215


   The proper KEYS file to use for verifying downloaded artifacts
   can be found here: https://downloads.apache.org/qpid/KEYS
   
   This is explained on the Qpid project website.
   
   Do NOT include a KEYS file in the dispatch tarball since an attacker
   can spoof the one in the tarfile itself.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to