On Monday 01 May 2006 21:49, B H wrote: > It appears that httpd-2.0.58.tar.gz is signed by Colm MacCarthaigh rather > than William Rowe (who is listed on the page > http://httpd.apache.org/download.cgi as being the signer for 2.0.55, and > has signed past releases I believe).
Who signs it is simply whoever rolls the release. Colm is trusted by the ASF to roll and sign a release. You'll note that Colm's key is signed by quite a few other Apache people, so if you trust any of us you should trust him. -- Nick Kew --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
