[
https://issues.apache.org/jira/browse/CALCITE-1746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15963330#comment-15963330
]
Josh Elser commented on CALCITE-1746:
-------------------------------------
+1 thanks, Julian!
> Remove KEYS file from git and from release tar ball
> ---------------------------------------------------
>
> Key: CALCITE-1746
> URL: https://issues.apache.org/jira/browse/CALCITE-1746
> Project: Calcite
> Issue Type: Bug
> Components: avatica, site
> Reporter: Julian Hyde
> Assignee: Julian Hyde
> Fix For: avatica-1.10.0, 1.13.0
>
>
> Remove KEYS file from git repo, and from their release tar balls.
> The definitive KEYS file is the one in subversion, viz
> https://dist.apache.org/repos/dist/release/calcite. Having a KEYS file in the
> git repo is redundant, misleading, and potentially dangerous: if a git repo
> or release tar ball is compromised then its KEYS file may be compromised.
> This applies to both Calcite and Avatica.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
