[
https://issues.apache.org/jira/browse/CALCITE-1746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15963275#comment-15963275
]
Julian Hyde commented on CALCITE-1746:
--------------------------------------
[~elserj], Please review
https://github.com/julianhyde/calcite/tree/1746-remove-keys and
https://github.com/julianhyde/calcite-avatica/tree/1746-remove-keys.
> Remove KEYS file from git and from release tar ball
> ---------------------------------------------------
>
> Key: CALCITE-1746
> URL: https://issues.apache.org/jira/browse/CALCITE-1746
> Project: Calcite
> Issue Type: Bug
> Reporter: Julian Hyde
> Assignee: Julian Hyde
> Fix For: avatica-1.10.0, 1.13.0
>
>
> Remove KEYS file from git repo, and from their release tar balls.
> The definitive KEYS file is the one in subversion, viz
> https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the
> git repo is redundant, misleading, and potentially dangerous: if a git repo
> or release tar ball is compromised then its KEYS file may be compromised.
> This applies to both Calcite and Avatica.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
