RE: repo security

[Noel J. Bergman]

> One thing I'd like to see is *every* JAR signed w/ certs under a
> single CA, say the Maven one.

Well, we have an ASF CA, which I would trust.  Talk with Ben Laurie about
it.

        --- Noel