[
https://issues.apache.org/jira/browse/CALCITE-1746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15963257#comment-15963257
]
Julian Hyde commented on CALCITE-1746:
--------------------------------------
By the way, currently Calcite's and Avatica's KEYS files are identical to that
in svn.
> Remove KEYS file from git and from release tar ball
> ---------------------------------------------------
>
> Key: CALCITE-1746
> URL: https://issues.apache.org/jira/browse/CALCITE-1746
> Project: Calcite
> Issue Type: Bug
> Reporter: Julian Hyde
> Assignee: Julian Hyde
>
> Remove KEYS file from git repo, and from their release tar balls.
> The definitive KEYS file is the one in subversion, viz
> https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the
> git repo is redundant, misleading, and potentially dangerous: if a git repo
> or release tar ball is compromised then its KEYS file may be compromised.
> This applies to both Calcite and Avatica.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
