The message from Mark Thomas is that ASF pays "per signing event" and that many jars can be signed in one event. Also, he says that infra is confident that it can afford all projects signing all releases (assuming that all jars into a single event).
We should also note that there is a difference between "testing" and "production", where the former incur no cost, and meant for getting the automated build in order. So, let's put that into the roadmap for 3.0 as well. Cheers -- Niclas Hedhman, Software Developer http://zest.apache.org - New Energy for Java
