Hi, On Mon, Jun 8, 2015 at 2:55 PM, Cédric Champeau <[email protected]> wrote: > Well I guess the debate is because of Groovy and our use of robot keys, so > "should" vs "must". If it's a should, I think we're ok...
Would it be possible to sign the robot keys with your own keys? The alternative is to sign the release archive with your own key, in addition to the robot's signature - AFAICS for Groovy that's a single file to sign. -Bertrand --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
