> 3. ASF Infra is requesting we remove the rpm/deb files from downloads.a.o > asap. >
To be accurate: ASF Infra is requiring that we fix by (extra superfluous) signing and re-voting on all past rpm/deb rpm/deb files, OR remove them from downloads.a.o, asap. Resigning and re-voting all rpm/deb packages and repositories for all past releases is a mammoth task that no one wants to undertake. Furthermore, frog.io being built for this gives us a number of improvements, e.g. these repositories contain all past patch versions on each repo series (major/minor). downloads.a.o does not, and if you want to downgrade you have to switch repositories to archives.a.o Improving this situation: ease of downgrades: has been requested by users a number of times.