Fwd: Re: Code signing and WOT for releases

2016-07-26 Thread Thorsten Schöning
Dies ist eine weitergeleitete Nachricht Von: Mark Thomas An : gene...@incubator.apache.org Datum : Dienstag, 26. Juli 2016, 09:48 Betreff: Code signing and WOT for releases ===8<=== Original Nachrichtentext === On 26/07/2016 08:19, Thorsten Schöning wr

Code signing and WOT for releases

2016-07-26 Thread Thorsten Schöning
Hi all, the docs about release management for incubating projects make clear that the release needs to be signed[1] and in the end associated with the project AND the WOT of Apache in general[2]. Is there some way to check what the owner of a PGP key for former releases has done to get his associ