When I deploy to repository.apache.org <https://repository.apache.org/#welcome> in addition to the .asc signatures, either the Maven deploy plugin or the repository always adds MD5 and SHA1 signatures as well.
Is there a configuration somewhere that will eliminate these being added? Lee.