You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@community.apache.org by "Sebb (Jira)" <ji...@apache.org> on 2021/02/18 10:35:00 UTC

[jira] [Created] (COMDEV-400) Drop project keys files

Sebb created COMDEV-400:
---------------------------

             Summary: Drop project keys files
                 Key: COMDEV-400
                 URL: https://issues.apache.org/jira/browse/COMDEV-400
             Project: Community Development
          Issue Type: Bug
          Components: Comdev, PhoneBook, Website
         Environment: https://people.apache.org/keys/group/
            Reporter: Sebb


The project keys files should be dropped.

On the face of it the project keys files could be useful, however that is not the case in practise. This is because:
* not all release signers are members of the project group
* release signing keys need to be kept even after a project goes to the attic or the signer leaves the pmc group.

Leaving the project keys files around has may result it inappropriate usage (as it has previously).

[Note that the individual keys are still available.]




--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@community.apache.org
For additional commands, e-mail: dev-help@community.apache.org