Hello mentors,

Back when Pivot first entered the Incubator, I had asked about the availability 
of an official Apache code signing certificate. Some of our demo and tutorial 
JARs are signed, but they currently use an unofficial (and expired) certificate 
Todd had created locally for testing purposes. This doesn't inspire quite as 
much confidence in the authenticity of the code as we would like.  :-)  

The response at the time was that no such certificate currently exists. Once we 
graduate, do you know if it might be possible to request one? I believe these 
cost around $500 (US) - is the ASF likely to cover something like this, or do 
you think we would need to fund it ourselves? 

FWIW, I actually tried to get both Verisign and Thawte to contribute a 
certificate a few months back, and I didn't get a reply from either one...maybe 
I will try again after we graduate. Anyone have any contacts at either place?

Thanks,
Greg

Reply via email to