Hi Justin/Nick, Thanks for clarification around the chain of trust - of course we're happy to follow further guidance if required.
Also, just to clarify re: the signature file - it's currently being staged in the relevant subdirectory here: https://dist.apache.org/repos/dist/dev When/if this vote passes, we'll move it to: https://dist.apache.org/repos/dist/release >From where it automatically gets copied to: https://www.apache.org/dist/ We'll then update our downloads page (http://milagro.apache.org/docs/downloads/) to include links for the new release including the signature. We believe this is the Apache Way, but also happy to amend if required. Regards, John > -----Original Message----- > From: Justin Mclean <jus...@classsoftware.com> > Sent: 16 January 2020 20:28 > To: general@incubator.apache.org > Subject: Re: [VOTE] Release Apache Milagro (incubating) Crypto-C V2.0.1 > > Hi, > > > Couple of apparent problems with the PGP signature: > > > > (1) Shouldn't it be visible from the download page? > > It is [1] (apache-milagro-crypto-c-2.0.1-incubating-src.tar.gz.asc) > > > (2) I wasn't able to establish a chain of trust. > > That a nice to have not a requirement for a release. And different reviewers > may or may not be in the chain of trust. > > Thanks, > Justin > > 1. https://dist.apache.org/repos/dist/dev/incubator/milagro/apache- > milagro-crypto-c-2.0.1-incubating/ > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
