On 2011-09-09, Ron Grabowski wrote: > New key? I think I Nicko sent me the current assembly keya long time > ago. People always complain when keys change
Search a while back through your mail backlog (about a month). There is consensus to move to a new key that is deliberately not kept secret so people can build their own patched versions of log4net and get the same strong name. We will explain that the key does not provide any sort of security promise - people are supposed to verify the PGP signature for that. Some people may rely on the implied promise of "this is the real thing" of the old key which is why Curt asked us to not make the old key public (this is the only reason why we need a new key). 1.2.11 and maybe later releases should be available with two different strong names. Stefan