Hi, > Why does a badge have to be hosted in version control. Can it not be just > a simple remotely referenced image, like a GIF or a JPG on a website?
The metadata in the badge allows it to be verified as a valid badge by checking the assertion JSON at a public URL. > Simply by hash or something, but by e-mail address. The internal website > on your ASF system where you have the "score" (or certification / completed > course) can convert and render the appropriate badge. The metadata in the PNG does indeed include a hash of the email address of the person it was issued to. Kind Regards, Justin
