On 2018/04/16 01:26:54, Sean Busbey <bus...@apache.org> wrote: > > > On 2018/04/15 21:39:04, Christopher <ctubb...@apache.org> wrote: > > On Sun, Apr 15, 2018 at 10:11 AM Sean Busbey <bus...@apache.org> wrote: > > > > > > > However, I can't verify that the source artifact or any other artifacts > > > that we'll eventually place in dist.a.o/release has correct checksums that > > > meet the current release distribution policy simply because we don't have > > > the relevant bits posted here in the RC. > > > > > > > > You can't verify the contents of what will eventually be there anyway... > > anybody could copy things incorrectly. But, they *should* be what was in > > the staging directory... so you can always do a byte-for-byte comparison to > > the staging repo (which gets promoted to Maven Central) and verify the > > checksum matches that. > > > > Those are very different levels of effort. In one case I can see if the thing > folks voted on is the thing that's hosted (or at least the thing I end up > with when I download the thing that's hosted). the checksums are supposed to > serve this purpose. >
Jeez. I am doing terrible for proofreading this weekend. This was supposed to say "in either case I can see..."
