[tor-bugs] #28584 [Metrics]: Give up on signing jars

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Nov 22 15:53:16 UTC 2018


#28584: Give up on signing jars
-----------------------------+----------------------
     Reporter:  karsten      |      Owner:  karsten
         Type:  enhancement  |     Status:  assigned
     Priority:  Medium       |  Milestone:
    Component:  Metrics      |    Version:
     Severity:  Normal       |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |   Reviewer:
      Sponsor:               |
-----------------------------+----------------------
 As discussed in Mexico City, we're going to give up on signing jars.

 The reason is that it makes the release process more complex for no real
 gain. We already sign release tarballs containing those jars.

 In fact, when the release process is easier, we're going to add multiple
 signatures by multiple team members to the release tarball.

 I'm going to post a metrics-base and metrics-lib patch soon.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28584>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list