> The ASF is trying to create a single KEYS file, but it takes some time
> because of all the signing that needs to be done.  For right now,the KEYS
> file is supposed to have the key used to sign the tarball when it is
> signed.  The "how to roll a release" page specifically states that.

Wouldn't it be easier to just put a list of key ids in this file and then
fetch this key list from the key servers when it is time to roll a
release?

-Rasmus

Reply via email to