Apache
/
poi
mirror of https://github.com/apache/poi.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

KEYS file should only have public keys used to sign previous releases 

git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1768877 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Javen O'Neal 2016-11-09 08:57:26 +00:00
parent 776621c3bb
commit d8e2b007e3
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
KEYS
View File

@ -9,6 +9,14 @@ Developers:
(gpg --list-key <your email>
&& gpg --armor --export <your email>) >> this file.
Since the KEYS may be needed to check signatures for archived
releases, it is important that all keys that have ever been used
to sign releases are retained in the file. Entries should only
be added, not removed.
To keep the KEYS file manageable, it's recommended to only add
the keys of committers who have signed releases.
https://www.apache.org/dev/release-signing#keys-policy
https://people.apache.org/keys/
pub 1024D/12DAE9BE 2004-01-25 Glen Stampoultzis <glens@apache.org>